file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221104-1573xaddhm
SHA256 c3078a79d59e7d8805bd87941ce7f04a70bc822c04bf4aba68512f4b2d559feb
MD5 8eb00748b28ddc0a448826b58d2376d7
SHA1 8bd764da6f3f694a1616fdb59b4530e4e74c25c6
SHA512 e2827a6955029f63d41921211eb37e9dcb0add24ca5e5df6a75e63329174c5b9e0bc2e5b9eebafe67ee7d7081d63dccf034464ca36f7e1b899d7157e42087cf7
SSDEEP 6144:bTy6ALVjIzWLHws8a39HYtX4DIoOncJ8U+R3JJGR7OP:bTyDLJccws8atHYuDPYRZ4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH 2f962f9e0aa6040738cb96510e5f3130
SHA256 c3078a79d59e7d8805bd87941ce7f04a70bc822c04bf4aba68512f4b2d559feb
MD5 8eb00748b28ddc0a448826b58d2376d7
SHA1 8bd764da6f3f694a1616fdb59b4530e4e74c25c6
SHA512 e2827a6955029f63d41921211eb37e9dcb0add24ca5e5df6a75e63329174c5b9e0bc2e5b9eebafe67ee7d7081d63dccf034464ca36f7e1b899d7157e42087cf7
SSDEEP 6144:bTy6ALVjIzWLHws8a39HYtX4DIoOncJ8U+R3JJGR7OP:bTyDLJccws8atHYuDPYRZ4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19497

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA InterlockedIncrement OpenJobObjectA WaitNamedPipeA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetSystemDirectoryA GetVolumePathNameA GetThreadContext GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA CreateMutexA GetFileAttributesExW ReadConsoleInputW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection RaiseException WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode RtlUnwind SetStdHandle GetModuleHandleA HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing