file[.]exe | Triage™

General

Target
file.exe
Size 291KB
Sample221104-hvb9dachb6
SHA256 7032eb22248c82e6fcc0c62aebcbf32aefa1c23f51ad51714dfc828d92ed138b
MD5 35f5ed45a18d758ca21bb65dad7e3f7d
SHA1 1e00995f1ded0540bab57bbd21dbc48b2e9e46cd
SHA512 52bd61185f1c197c08bbf6c8cf84bb0d74c0e584c7efd665573546e80524c3d1b45657d169f8a539972d4785ea4ee03d4d77e9c5adb2ccadb3f9e6266355d012
SSDEEP 3072:Y2upQvvLSoH4lu5rtIKVCe8Ss6OU5Rpf0AYK+pw02uXy:upYLbYlYtIT4DfyKIq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 291KB

file.exe

IMPHASH e412cb3cd2101fa7976d1b955d53f138
SHA256 7032eb22248c82e6fcc0c62aebcbf32aefa1c23f51ad51714dfc828d92ed138b
MD5 35f5ed45a18d758ca21bb65dad7e3f7d
SHA1 1e00995f1ded0540bab57bbd21dbc48b2e9e46cd
SHA512 52bd61185f1c197c08bbf6c8cf84bb0d74c0e584c7efd665573546e80524c3d1b45657d169f8a539972d4785ea4ee03d4d77e9c5adb2ccadb3f9e6266355d012
SSDEEP 3072:Y2upQvvLSoH4lu5rtIKVCe8Ss6OU5Rpf0AYK+pw02uXy:upYLbYlYtIT4DfyKIq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA WriteConsoleInputA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesA CreateMutexW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW WriteConsoleW GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing