file[.]exe | Triage™

General

Target
file.exe
Size 292KB
Sample221104-pp2emshbep
SHA256 26bcf2dcbd9800e096f9c4bb4613c978a33ecbfc1b5e732560fd99fc78db9bd6
MD5 60cdefa120ae372a6c63ba3268d30932
SHA1 ec2643529ef0719b967065a49db4d14c91b2fb65
SHA512 db60559c14195013232002dad57f65a53898f78b6032259387e46514e7f441af02b015030b033b563fb05410eec9cb3c23435b5d2c4296e377f99d8e4be2b089
SSDEEP 3072:1AdpAfOLymq0E5r5ILV0X32ekoyaqtrd2b/+Xn+Jg4d6e9VZIpCwG:uphLO025IL2XGekoybi+X+JDdfbI9G
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 292KB

file.exe

IMPHASH f786c50a05009f33c9b2a14218b2166e
SHA256 26bcf2dcbd9800e096f9c4bb4613c978a33ecbfc1b5e732560fd99fc78db9bd6
MD5 60cdefa120ae372a6c63ba3268d30932
SHA1 ec2643529ef0719b967065a49db4d14c91b2fb65
SHA512 db60559c14195013232002dad57f65a53898f78b6032259387e46514e7f441af02b015030b033b563fb05410eec9cb3c23435b5d2c4296e377f99d8e4be2b089
SSDEEP 3072:1AdpAfOLymq0E5r5ILV0X32ekoyaqtrd2b/+Xn+Jg4d6e9VZIpCwG:uphLO025IL2XGekoybi+X+JDdfbI9G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasExesA MapUserPhysicalPages InterlockedIncrement MoveFileExW OpenJobObjectA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW CreateMutexW WriteConsoleW ReadFile GetSystemDirectoryA GetVolumePathNameA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW FindAtomA FindNextFileA GetFileAttributesExW LCMapStringW GetFileAttributesA GetSystemDefaultLangID HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA RaiseException TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle GetModuleHandleA HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP LCMapStringA GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing