file[.]exe | Triage™

General

Target
file.exe
Size 361KB
Sample221102-l175saahd8
SHA256 8c3a455eb4428973e37b79ea2c20cac47daeda45ec47285e7faf284c7cf80cfe
MD5 3cfa7c6233e51d6d2f5b1a572b365f6e
SHA1 d7ceea165b410c18e2f921413f650d3a6ad5c861
SHA512 2a191ae72504f6adf411cc68e89a22ec4fdc62eb788f3565f42e5f7172e7261de512f9d111ef9762817e789dab777b2595eab827d20c890ce98eafe432a5a5cd
SSDEEP 6144:K8jLcBeZBd6WA3/y1L/HgeK++YLpo7ITsq8:K80BeDd6WWydfgeN+cpo71
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 361KB

file.exe

IMPHASH 0ebd17a13b40f108ded2cb86c03ee706
SHA256 8c3a455eb4428973e37b79ea2c20cac47daeda45ec47285e7faf284c7cf80cfe
MD5 3cfa7c6233e51d6d2f5b1a572b365f6e
SHA1 d7ceea165b410c18e2f921413f650d3a6ad5c861
SHA512 2a191ae72504f6adf411cc68e89a22ec4fdc62eb788f3565f42e5f7172e7261de512f9d111ef9762817e789dab777b2595eab827d20c890ce98eafe432a5a5cd
SSDEEP 6144:K8jLcBeZBd6WA3/y1L/HgeK++YLpo7ITsq8:K80BeDd6WWydfgeN+cpo71
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17345

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW ReadFile GetVolumePathNameA SetThreadContext GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW ReadConsoleInputW LCMapStringW LCMapStringA GetSystemDefaultLangID HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing