file[.]exe | Triage™

General

Target
file.exe
Size 360KB
Sample221102-rwva1shea3
SHA256 b59c680d8fc86ce94bbf41b2943b8c8b707a0f51aafbae6d77947e88fb87e90b
MD5 7f816e0f596668c18cd55cdda809b136
SHA1 b2cf4e32b4afe56afc4e4146cd7616693251f15d
SHA512 4fa18e3b7c907a60268c6b961cc48360d29a209d62fdf48af83f63576ce3add4fd6b9259edc4313cc3fe26c8427b1734f3a93f56de87ed313eed8a804790fe33
SSDEEP 6144:HL8rvIbxWorwQHl8YhVW7xS+0KRyCwx777ITsq:r8EbxWo0uzVW7xS+0Qk77
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 360KB

file.exe

IMPHASH 3d675596ca8e40a75b4d427a316299a8
SHA256 b59c680d8fc86ce94bbf41b2943b8c8b707a0f51aafbae6d77947e88fb87e90b
MD5 7f816e0f596668c18cd55cdda809b136
SHA1 b2cf4e32b4afe56afc4e4146cd7616693251f15d
SHA512 4fa18e3b7c907a60268c6b961cc48360d29a209d62fdf48af83f63576ce3add4fd6b9259edc4313cc3fe26c8427b1734f3a93f56de87ed313eed8a804790fe33
SSDEEP 6144:HL8rvIbxWorwQHl8YhVW7xS+0KRyCwx777ITsq:r8EbxWo0uzVW7xS+0Qk77
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17313

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WaitNamedPipeA WriteConsoleInputA GetModuleHandleW GetGeoInfoW GlobalAlloc LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA SetThreadContext GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW AddAtomW CreateEventW OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW ReadConsoleInputW LCMapStringW GetLastError GetSystemDefaultLangID HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing