file[.]exe | Triage™

General

Target
file.exe
Size 285KB
Sample221105-dsgc4adcc7
SHA256 1995f343b226bda972a270030f9946d9b1c8a6bb2cb6b7f7e864ead153e687ae
MD5 de24a3bf5012aebfc3e2b72cfa4df961
SHA1 0965e9fa8440a554c00f5e4ba1d2c45afa2c3cf3
SHA512 560b01586184fac77e026f522d2be88b8e8cdbfc1ac3a3f743512b7bbe5d84a293b449b3bc0416d231cb0992aeb8089ab675019016d6dc901640fe3e6e61e20f
SSDEEP 3072:qnHqiyLFkQgGp56QRyfD3Zl0BQVi0KC0Cl67IX3iwn0:aHqvUGmQRYDE0KTCl67eiw0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 285KB

file.exe

IMPHASH 313624700e3a22e3b8d0f2db4333dd1a
SHA256 1995f343b226bda972a270030f9946d9b1c8a6bb2cb6b7f7e864ead153e687ae
MD5 de24a3bf5012aebfc3e2b72cfa4df961
SHA1 0965e9fa8440a554c00f5e4ba1d2c45afa2c3cf3
SHA512 560b01586184fac77e026f522d2be88b8e8cdbfc1ac3a3f743512b7bbe5d84a293b449b3bc0416d231cb0992aeb8089ab675019016d6dc901640fe3e6e61e20f
SSDEEP 3072:qnHqiyLFkQgGp56QRyfD3Zl0BQVi0KC0Cl67IX3iwn0:aHqvUGmQRYDE0KTCl67eiw0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19817

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA InterlockedIncrement OpenJobObjectA WaitNamedPipeA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW ReadFile GetVolumePathNameA GetConsoleAliasesW GetThreadContext GetProcAddress VirtualAlloc VerLanguageNameA WriteProfileSectionA CopyFileA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing