file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221104-1d62jabcd3
SHA256 79af2d9ea5db442d420dfca7cb1f7ffaf3abd901aaed2464315bf99d5d215c8e
MD5 e75c89a0cdacc37f2c02f677f4865d49
SHA1 d8a7e8bb110c78ee767a81d5bf247b6a5089141d
SHA512 5f15c4247413206f6fc5cb6596be2b7380bbb8aed3b182a3ca09c9fac692a25a6b32e5b4640140c5bddc9f4e04dc21176a66c164bb84d45627036a4ff6b3de55
SSDEEP 6144:gTA69azd3f4jMecYa8UDHs4/0LywNtYO6g07NYbSzv:gTAbJvqMeJcHbt2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH 2f962f9e0aa6040738cb96510e5f3130
SHA256 79af2d9ea5db442d420dfca7cb1f7ffaf3abd901aaed2464315bf99d5d215c8e
MD5 e75c89a0cdacc37f2c02f677f4865d49
SHA1 d8a7e8bb110c78ee767a81d5bf247b6a5089141d
SHA512 5f15c4247413206f6fc5cb6596be2b7380bbb8aed3b182a3ca09c9fac692a25a6b32e5b4640140c5bddc9f4e04dc21176a66c164bb84d45627036a4ff6b3de55
SSDEEP 6144:gTA69azd3f4jMecYa8UDHs4/0LywNtYO6g07NYbSzv:gTAbJvqMeJcHbt2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19497

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA InterlockedIncrement OpenJobObjectA WaitNamedPipeA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetSystemDirectoryA GetVolumePathNameA GetThreadContext GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA CreateMutexA GetFileAttributesExW ReadConsoleInputW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection RaiseException WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode RtlUnwind SetStdHandle GetModuleHandleA HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing