file[.]exe | Triage™

General

Target
file.exe
Size 410KB
Sample221104-j3bhgsfdbl
SHA256 63cd0c5a00f80d30895e7ca127f5f594025fcebbea529247b3aabe186f96efec
MD5 a485d35344e3a1791bfc933cdc1c4107
SHA1 455c5fc5e553bf522ce81ea83dc57a56cf5c4121
SHA512 5c65b1af5da3f1408fe28821fe9787c91fd34ecc6cb857a5359426e40d2fa16fb0528c8167a311f7e8d5695615c4fb8ccfa8ea4ba8efbef82da28a55029a6f0d
SSDEEP 6144:op7LwNYYZv8CvTFgBzeGwpVwoYdWlWQFn:op70NYe8Cv6pdCF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 410KB

file.exe

IMPHASH e412cb3cd2101fa7976d1b955d53f138
SHA256 63cd0c5a00f80d30895e7ca127f5f594025fcebbea529247b3aabe186f96efec
MD5 a485d35344e3a1791bfc933cdc1c4107
SHA1 455c5fc5e553bf522ce81ea83dc57a56cf5c4121
SHA512 5c65b1af5da3f1408fe28821fe9787c91fd34ecc6cb857a5359426e40d2fa16fb0528c8167a311f7e8d5695615c4fb8ccfa8ea4ba8efbef82da28a55029a6f0d
SSDEEP 6144:op7LwNYYZv8CvTFgBzeGwpVwoYdWlWQFn:op70NYe8Cv6pdCF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA WriteConsoleInputA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesA CreateMutexW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW WriteConsoleW GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing