file[.]exe | Triage™

General

Target
file.exe
Size 293KB
Sample221103-e6hzhshabr
SHA256 3e9191c8a3d1b26fb0351478839fe4605c2c2c3bbadc561b98499b632e31d1d6
MD5 60be5c9c87907487fe1314ccaa7a5779
SHA1 4815951c85863f27f9a4c133cb8492624c2415a6
SHA512 e4d6837d3f91d805d272aebb23300faffb2511fdb1b28e7ef5824411374aa3459fc42599e55227ae9fa985ea12568f962902d4478735cebef43f6fdb26606074
SSDEEP 3072:YqBV6QLFxtvlok57xROc4vz+uyOrldzJPcnWcQtdCf7X86:LBPLVemx7YnrldzJP+W5sM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 293KB

file.exe

IMPHASH babefe8ee1a998f9b022d1c5e07ae8f5
SHA256 3e9191c8a3d1b26fb0351478839fe4605c2c2c3bbadc561b98499b632e31d1d6
MD5 60be5c9c87907487fe1314ccaa7a5779
SHA1 4815951c85863f27f9a4c133cb8492624c2415a6
SHA512 e4d6837d3f91d805d272aebb23300faffb2511fdb1b28e7ef5824411374aa3459fc42599e55227ae9fa985ea12568f962902d4478735cebef43f6fdb26606074
SSDEEP 3072:YqBV6QLFxtvlok57xROc4vz+uyOrldzJPcnWcQtdCf7X86:LBPLVemx7YnrldzJP+W5sM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetFileAttributesA GetConsoleAliasW WriteConsoleW CreateMutexW GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW ReadFile GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing