file[.]exe | Triage™

General

Target
file.exe
Size 361KB
Sample221102-e3nqlaaadr
SHA256 59d623fd9c5d8914afc66472e84d3a03b3d528d289f33c8d9f985de3d97ee726
MD5 0ee1f0ab6e9a43f762976bf862436b0b
SHA1 a6e2b0ecf532e5c16a0e861e805defcc0c22e81f
SHA512 4dd2c1858f09fc0a76e124d049f581e5f07ef3baf11b1807b373e41ee46fb09659091819b9c4e6ff3ba5edf625fced7a62fb72456cafeba7cb8b0b1a8ab42e6e
SSDEEP 6144:28cFLs1J8321YOPcZ50c8Fnag+rEQQ7ITsqF:288LsE32HcP0c8FnWQQQ7c
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 361KB

file.exe

IMPHASH 0ebd17a13b40f108ded2cb86c03ee706
SHA256 59d623fd9c5d8914afc66472e84d3a03b3d528d289f33c8d9f985de3d97ee726
MD5 0ee1f0ab6e9a43f762976bf862436b0b
SHA1 a6e2b0ecf532e5c16a0e861e805defcc0c22e81f
SHA512 4dd2c1858f09fc0a76e124d049f581e5f07ef3baf11b1807b373e41ee46fb09659091819b9c4e6ff3ba5edf625fced7a62fb72456cafeba7cb8b0b1a8ab42e6e
SSDEEP 6144:28cFLs1J8321YOPcZ50c8Fnag+rEQQ7ITsqF:288LsE32HcP0c8FnWQQQ7c
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17345

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW ReadFile GetVolumePathNameA SetThreadContext GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW ReadConsoleInputW LCMapStringW LCMapStringA GetSystemDefaultLangID HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing