file[.]exe | Triage™

General

Target
file.exe
Size 286KB
Sample221105-dhwp2afbel
SHA256 8ccbdb6e79cb28f5c351fae88fda9c3c0d116803602d37da08546812afb5b3ab
MD5 86aa88b1d7ff4f44375c242d90b954ba
SHA1 cf5d1468720eff063dbde02e2330e2409729c4b1
SHA512 2aab5313da2d3f8ad7fd2242356f1323e1302f1d04fa01ffd8c64831df30472ac97014ca3eb28e069bc429d6bcf62b198fade2dffd89d517e82001ef69776e56
SSDEEP 3072:4cqipAuQgMp56af+159XPLcGmA0pDH2ooGhl+17lEu7YmNcz:PqIMmafqrLmDDHHo6+17eM3N2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 286KB

file.exe

IMPHASH 313624700e3a22e3b8d0f2db4333dd1a
SHA256 8ccbdb6e79cb28f5c351fae88fda9c3c0d116803602d37da08546812afb5b3ab
MD5 86aa88b1d7ff4f44375c242d90b954ba
SHA1 cf5d1468720eff063dbde02e2330e2409729c4b1
SHA512 2aab5313da2d3f8ad7fd2242356f1323e1302f1d04fa01ffd8c64831df30472ac97014ca3eb28e069bc429d6bcf62b198fade2dffd89d517e82001ef69776e56
SSDEEP 3072:4cqipAuQgMp56af+159XPLcGmA0pDH2ooGhl+17lEu7YmNcz:PqIMmafqrLmDDHHo6+17eM3N2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19817

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA InterlockedIncrement OpenJobObjectA WaitNamedPipeA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW ReadFile GetVolumePathNameA GetConsoleAliasesW GetThreadContext GetProcAddress VirtualAlloc VerLanguageNameA WriteProfileSectionA CopyFileA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing