file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221104-x8drpacbhm
SHA256 a9bdd9560ff41f39e16181caaabbed58ffefb18d8372e4a50b57998149b68640
MD5 e61205da67eff0e8b65a3fb0a3798bd6
SHA1 aa9507bfd2f37766b6184dba976fbb37ac6eb2cc
SHA512 e1ff7faa4201fa94cb5aefa95f2c93bcc21fd4c18ce98a9d0ac8c20b8e0be5036a5e319f00a4e4e457043127dd4f8243be741f4931fdc97b37e052546c5f58c7
SSDEEP 3072:E5/TBVp2xxP5Fz6mJdSl1HORdldCbvCqVIIyJ8uqjlf5v2wMT:g/TiBWdDHCd7EvCG8Ijd5v2wO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH 16b436c30f39ef43763690a76519424b
SHA256 a9bdd9560ff41f39e16181caaabbed58ffefb18d8372e4a50b57998149b68640
MD5 e61205da67eff0e8b65a3fb0a3798bd6
SHA1 aa9507bfd2f37766b6184dba976fbb37ac6eb2cc
SHA512 e1ff7faa4201fa94cb5aefa95f2c93bcc21fd4c18ce98a9d0ac8c20b8e0be5036a5e319f00a4e4e457043127dd4f8243be741f4931fdc97b37e052546c5f58c7
SSDEEP 3072:E5/TBVp2xxP5Fz6mJdSl1HORdldCbvCqVIIyJ8uqjlf5v2wMT:g/TiBWdDHCd7EvCG8Ijd5v2wO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19545

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA InterlockedIncrement OpenJobObjectA WaitNamedPipeA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA CreateEventA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetSystemDirectoryA GetVolumePathNameA GetConsoleAliasesW GetThreadContext GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA EnumSystemCodePagesW FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindAtomA FindNextFileA CreateMutexA GetFileAttributesExW ReadConsoleInputW LCMapStringW GetLastError GetSystemDefaultLangID MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection RaiseException WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode RtlUnwind SetStdHandle GetModuleHandleA HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing