file[.]exe | Triage™

General

Target
file.exe
Size 286KB
Sample221105-ry56asgcb3
SHA256 8ec931cddc18db83ebd308660dece0e1f5b6fe022786c700496a73a73e9f1507
MD5 4f6b346ced7ff8ea55ad556dabadab40
SHA1 ea231750bf2d0d189f0618f19f7a1d859ed6f440
SHA512 cea88c3cd65455583ab83b73f99192aad09317b0ac3d13f704f2cec682a3809dc5f24d989341f649e8518b4d88a707523f0972ab0831287e0647113749b88909
SSDEEP 3072:0qVzq+Ebg7gg8lq65aBPOcImomqJSTkTJyZZo3yudm6UL+Zqby5Pyn9EJ:tZqQN8MZM+o4EJTTdm6zZKyZyno
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 286KB

file.exe

IMPHASH db5fd77815672c1940991be7b22c596d
SHA256 8ec931cddc18db83ebd308660dece0e1f5b6fe022786c700496a73a73e9f1507
MD5 4f6b346ced7ff8ea55ad556dabadab40
SHA1 ea231750bf2d0d189f0618f19f7a1d859ed6f440
SHA512 cea88c3cd65455583ab83b73f99192aad09317b0ac3d13f704f2cec682a3809dc5f24d989341f649e8518b4d88a707523f0972ab0831287e0647113749b88909
SSDEEP 3072:0qVzq+Ebg7gg8lq65aBPOcImomqJSTkTJyZZo3yudm6UL+Zqby5Pyn9EJ:tZqQN8MZM+o4EJTTdm6zZKyZyno
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19913

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW GetLastError OpenJobObjectA VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetProcAddress GetThreadContext HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing