file[.]exe | Triage™

General

Target
file.exe
Size 323KB
Sample221102-3hpddscfg9
SHA256 4d3b5a685e36cfb2115c96e1e486e04e49527352a0c37101f4713d2b1ad4fbf3
MD5 35786079d590907f819a980f2b96a1bb
SHA1 43d05ace84a230d4bf9be8a327b78af5fbf44a1f
SHA512 d3497c1234d2bb6c05b3fd517dc397882dc0120a38d0e9625908629bed69e916508410bb410746ead61b7336204e2498af86e8e1f69523603737722eff421fac
SSDEEP 6144:s/gLhsshydXfo1vpiSjRbfl89AYSAA7ITsq:s/gdssUFfo1vNjRbt82fAA7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 323KB

file.exe

IMPHASH cefad7a22bff9bb365ee732415d34af8
SHA256 4d3b5a685e36cfb2115c96e1e486e04e49527352a0c37101f4713d2b1ad4fbf3
MD5 35786079d590907f819a980f2b96a1bb
SHA1 43d05ace84a230d4bf9be8a327b78af5fbf44a1f
SHA512 d3497c1234d2bb6c05b3fd517dc397882dc0120a38d0e9625908629bed69e916508410bb410746ead61b7336204e2498af86e8e1f69523603737722eff421fac
SSDEEP 6144:s/gLhsshydXfo1vpiSjRbfl89AYSAA7ITsq:s/gdssUFfo1vNjRbt82fAA7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW CreateMutexW GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW ReadFile GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing