file[.]exe | Triage™

General

Target
file.exe
Size 404KB
Sample221105-gm124agbem
SHA256 166540cb4f5358812bcfb1212e684fa02891990daa5e868dfc56a2264e8e574a
MD5 0f28ce8e36d2fff532b5d8945dc14a55
SHA1 c92bb4889a71c9b11440164341cacf1e71d0922a
SHA512 c266958a211a47f5f383c28fbd8428af86c11e9d270ad5198a50616260c8ddc168b6a8efe6481019fb586f45520702089a64a7d9ac16753af3d2287753d77af4
SSDEEP 6144:HqU0mwOdSuetiDDhrR0VFRFtrkN5G7DXM5SO3tx3hG:HqriSueto90VFXtUN5SO3j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 404KB

file.exe

IMPHASH 313624700e3a22e3b8d0f2db4333dd1a
SHA256 166540cb4f5358812bcfb1212e684fa02891990daa5e868dfc56a2264e8e574a
MD5 0f28ce8e36d2fff532b5d8945dc14a55
SHA1 c92bb4889a71c9b11440164341cacf1e71d0922a
SHA512 c266958a211a47f5f383c28fbd8428af86c11e9d270ad5198a50616260c8ddc168b6a8efe6481019fb586f45520702089a64a7d9ac16753af3d2287753d77af4
SSDEEP 6144:HqU0mwOdSuetiDDhrR0VFRFtrkN5G7DXM5SO3tx3hG:HqriSueto90VFXtUN5SO3j
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19817

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA InterlockedIncrement OpenJobObjectA WaitNamedPipeA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW ReadFile GetVolumePathNameA GetConsoleAliasesW GetThreadContext GetProcAddress VirtualAlloc VerLanguageNameA WriteProfileSectionA CopyFileA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing