file[.]exe | Triage™

General

Target
file.exe
Size 331KB
Sample221103-evspksedd5
SHA256 6afc4ff24ce1d4fce5576ca746670413d2d8439ec25f5248dfbaa8052ba0cefe
MD5 71c4d812f1b88d3b030f72ef1695b438
SHA1 8804d1ed78f86fefd3f70a34640ee091bcf5a8e4
SHA512 5cae0b6e3cce90753cbcc98a91d2ae2e75c00f526d3d4adee0d3ba7c349b67853df6e6de7a393796ee1bce6070025fe4e57381f852606fad03a708030ef4560c
SSDEEP 3072:8PBCYxLv3BJhFVk57EcjvV7ZCzH4Y4GdGClHUgFdMmItSMJzuAAfDc:WBbLfPpmEcjv2zYY4IGCxUgFdmtS5A8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 331KB

file.exe

IMPHASH babefe8ee1a998f9b022d1c5e07ae8f5
SHA256 6afc4ff24ce1d4fce5576ca746670413d2d8439ec25f5248dfbaa8052ba0cefe
MD5 71c4d812f1b88d3b030f72ef1695b438
SHA1 8804d1ed78f86fefd3f70a34640ee091bcf5a8e4
SHA512 5cae0b6e3cce90753cbcc98a91d2ae2e75c00f526d3d4adee0d3ba7c349b67853df6e6de7a393796ee1bce6070025fe4e57381f852606fad03a708030ef4560c
SSDEEP 3072:8PBCYxLv3BJhFVk57EcjvV7ZCzH4Y4GdGClHUgFdMmItSMJzuAAfDc:WBbLfPpmEcjv2zYY4IGCxUgFdmtS5A8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA WriteConsoleInputA SleepEx GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetFileAttributesA GetConsoleAliasW WriteConsoleW CreateMutexW GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetComputerNameA LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW ReadFile GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing