file[.]exe | Triage™

General

Target
file.exe
Size 443KB
Sample221102-zbveaabfb5
SHA256 5f18710df865427fef9a24625c4febcbfc6d3392d875139ffc4fe82f46a21762
MD5 d6e1dd18c01a11c79561aaa67b4ef461
SHA1 0910d2f7492f991d34c0591dc4590e39de0ffcac
SHA512 ac2a1644a49bd123c51f18b35883d331f80ea3ad835dae7c18f3beb5391c87d2845efe91909edc0101df6fc129e1f83827d3ed74467a96f16466797afcebb957
SSDEEP 6144:v/2LNUL0hsakvnEE81htg3oQohgrzdWT+5AvM7ITsq:v/2RULpa8ET1jIoQ1r5WXvM7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 443KB

file.exe

IMPHASH cefad7a22bff9bb365ee732415d34af8
SHA256 5f18710df865427fef9a24625c4febcbfc6d3392d875139ffc4fe82f46a21762
MD5 d6e1dd18c01a11c79561aaa67b4ef461
SHA1 0910d2f7492f991d34c0591dc4590e39de0ffcac
SHA512 ac2a1644a49bd123c51f18b35883d331f80ea3ad835dae7c18f3beb5391c87d2845efe91909edc0101df6fc129e1f83827d3ed74467a96f16466797afcebb957
SSDEEP 6144:v/2LNUL0hsakvnEE81htg3oQohgrzdWT+5AvM7ITsq:v/2RULpa8ET1jIoQ1r5WXvM7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW CreateMutexW GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW ReadFile GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing