file[.]exe | Triage™

General

Target
file.exe
Size 361KB
Sample221102-mbx4ysbad8
SHA256 53747cd0cb25ac2f074d5ed6995765c3bea7fbb47060cf1b7f0ee527316cf07e
MD5 3cdad486e8a2156774d14c18f0b01e8d
SHA1 b60ca0cfb857f40faac65aa7052e4548b530896d
SHA512 fae549bf2f2a6e7dacb2a0889b05ebc5a7a859596f66d66ef3f49b9c78c174bd8c7e1897fdeb6a40503254b35b434c3bc65b0236676c23437828c1818b59a928
SSDEEP 6144:j8rsCK31w491M0F1sDy67Rp0nok27ITsq:j8/K3lPM7xMnY7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 361KB

file.exe

IMPHASH 3d675596ca8e40a75b4d427a316299a8
SHA256 53747cd0cb25ac2f074d5ed6995765c3bea7fbb47060cf1b7f0ee527316cf07e
MD5 3cdad486e8a2156774d14c18f0b01e8d
SHA1 b60ca0cfb857f40faac65aa7052e4548b530896d
SHA512 fae549bf2f2a6e7dacb2a0889b05ebc5a7a859596f66d66ef3f49b9c78c174bd8c7e1897fdeb6a40503254b35b434c3bc65b0236676c23437828c1818b59a928
SSDEEP 6144:j8rsCK31w491M0F1sDy67Rp0nok27ITsq:j8/K3lPM7xMnY7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17313

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WaitNamedPipeA WriteConsoleInputA GetModuleHandleW GetGeoInfoW GlobalAlloc LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA SetThreadContext GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW AddAtomW CreateEventW OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW ReadConsoleInputW LCMapStringW GetLastError GetSystemDefaultLangID HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing