file[.]exe | Triage™

General

Target
file.exe
Size 332KB
Sample221102-ysnsdsbdh6
SHA256 cc1fa65046f4f7db740e425ca282fa56c66cf1f4e8e07be56cffb7a35e9b9820
MD5 521ef2b23c09d274b2253ebec92758ac
SHA1 87f9b63e10fe4e76116551c4dbda480d05b60f8a
SHA512 99dd12ae4e9b03b8900abcac60f10a51f724968d7ba8054697e4ce874857a4e4e3aaad42f8711470582871cb3fd0ac42ec66ca71aa1914f3c6d1fdc13558bd56
SSDEEP 6144:fkqarLB+KJs+T/Rd1HGFgYCxussWBnP7ITsq:fkq8xK+T/Rn4gvXsWd7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 332KB

file.exe

IMPHASH c2d264609c4c4fd446e3222be1511cfb
SHA256 cc1fa65046f4f7db740e425ca282fa56c66cf1f4e8e07be56cffb7a35e9b9820
MD5 521ef2b23c09d274b2253ebec92758ac
SHA1 87f9b63e10fe4e76116551c4dbda480d05b60f8a
SHA512 99dd12ae4e9b03b8900abcac60f10a51f724968d7ba8054697e4ce874857a4e4e3aaad42f8711470582871cb3fd0ac42ec66ca71aa1914f3c6d1fdc13558bd56
SSDEEP 6144:fkqarLB+KJs+T/Rd1HGFgYCxussWBnP7ITsq:fkq8xK+T/Rn4gvXsWd7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17392

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW ReadFile GetSystemDirectoryA SetThreadContext LCMapStringA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW ReadConsoleInputW LCMapStringW GetVolumePathNameA GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing