file[.]exe | Triage™

General

Target
file.exe
Size 330KB
Sample221104-l43pgaebd6
SHA256 dbdadf05765358b5058dc06724aa5160a4ce7576ad41cb1074bd92c513188421
MD5 bd6a4f0f7924c5abaab30720118295cc
SHA1 eced641937e2726c4644f3df51c4359c2ebc8b01
SHA512 e174161533b4959b27b9a0b197bafcf4551d7db3766d4783e088f2340b732e746dd25db89686b78630c8be919e14a00999409bcd727659aeeb41e3e40355c316
SSDEEP 6144:VpIgLZB6YL+8HZjbx7H7z0MeXVJJC2n4Fx:Vpj9B6i5Zjb9Hv0MJ2n
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 330KB

file.exe

IMPHASH e412cb3cd2101fa7976d1b955d53f138
SHA256 dbdadf05765358b5058dc06724aa5160a4ce7576ad41cb1074bd92c513188421
MD5 bd6a4f0f7924c5abaab30720118295cc
SHA1 eced641937e2726c4644f3df51c4359c2ebc8b01
SHA512 e174161533b4959b27b9a0b197bafcf4551d7db3766d4783e088f2340b732e746dd25db89686b78630c8be919e14a00999409bcd727659aeeb41e3e40355c316
SSDEEP 6144:VpIgLZB6YL+8HZjbx7H7z0MeXVJJC2n4Fx:Vpj9B6i5Zjb9Hv0MJ2n
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA WriteConsoleInputA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesA CreateMutexW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW WriteConsoleW GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing