file[.]exe | Triage™

General

Target
file.exe
Size 410KB
Sample221104-halx3scdh3
SHA256 d82effcbe405f4824e5b6f6b6f909d4d93ab6ff74b1ca4e59528ab22d407d1ad
MD5 f785a4fff870117112c909afd8cba00f
SHA1 b9dbc50b8a6937ff66ea468f2ed65f9a260aa252
SHA512 4f5cf5abe75827b98ee2dd602d29ea6387fbd5c7eb040cb6617843417d6c06819ca9932e4f6bfece7e74257a832f096cf97f4377595d2977512b676d2aa27f9e
SSDEEP 6144:MptLmHSYeFsCHMbEaNX8OwtM0JyyfrTaW/:MptiHSBdCllwtMSyyfrTaW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 410KB

file.exe

IMPHASH e412cb3cd2101fa7976d1b955d53f138
SHA256 d82effcbe405f4824e5b6f6b6f909d4d93ab6ff74b1ca4e59528ab22d407d1ad
MD5 f785a4fff870117112c909afd8cba00f
SHA1 b9dbc50b8a6937ff66ea468f2ed65f9a260aa252
SHA512 4f5cf5abe75827b98ee2dd602d29ea6387fbd5c7eb040cb6617843417d6c06819ca9932e4f6bfece7e74257a832f096cf97f4377595d2977512b676d2aa27f9e
SSDEEP 6144:MptLmHSYeFsCHMbEaNX8OwtM0JyyfrTaW/:MptiHSBdCllwtMSyyfrTaW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA WriteConsoleInputA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesA CreateMutexW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW WriteConsoleW GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing