file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221105-tt757sgfb5
SHA256 7012132a463dd9ddd6d744e376f034fe8808eea2cfa3e7436e180176258090cd
MD5 e1f91551d2d3a2756b84657e54586729
SHA1 8d7aab49ab6bbe446173b1c5ff71ba1c95c634f0
SHA512 a00d4605c1320963085c99282906ffb9a1e24c0e0c7fb2b27002e9f222862ead102476620d46fab74e81ee34e1fa7f289d9810ee32e6ec70f1499586176af4e7
SSDEEP 6144:QjqfHMZvAcPkBFeuVvIXPA6wS+x6HSZHeCIajoJ8xFYyj0n6qhY:QjqPM5AcBuRCPVceDCa8PYyjk6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH db5fd77815672c1940991be7b22c596d
SHA256 7012132a463dd9ddd6d744e376f034fe8808eea2cfa3e7436e180176258090cd
MD5 e1f91551d2d3a2756b84657e54586729
SHA1 8d7aab49ab6bbe446173b1c5ff71ba1c95c634f0
SHA512 a00d4605c1320963085c99282906ffb9a1e24c0e0c7fb2b27002e9f222862ead102476620d46fab74e81ee34e1fa7f289d9810ee32e6ec70f1499586176af4e7
SSDEEP 6144:QjqfHMZvAcPkBFeuVvIXPA6wS+x6HSZHeCIajoJ8xFYyj0n6qhY:QjqPM5AcBuRCPVceDCa8PYyjk6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19913

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW GetLastError OpenJobObjectA VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetProcAddress GetThreadContext HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing