file[.]exe | Triage™

General

Target
file.exe
Size 324KB
Sample221105-wcavgsbbfr
SHA256 f06abd43e7e1fff8f06c8b61ddffe18157230b38e5145717ca74d4e163dd39e4
MD5 95319d597e6f83b4e06cf8205f749a23
SHA1 16c820d94ae9e9bf3eb6b28d739b570bbc91121e
SHA512 ab1b799eba20fa351e0739d80ce20dd059124b6bd4275fc25b2a522974925d27c903f85cab931bd63cdfe9131773dee38fb59c83b835ddf562c337fc50f5f39f
SSDEEP 3072:psq/3HMAgut5NDhxRerlqTm/lz3BJnsHly+a5WjjlnKvhjXpEnNnw3w6S8hZE:Sq/cutDhmpWql7k45WjBnKv0ntw0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 324KB

file.exe

IMPHASH bd95b0aa9352043cb92dbf626ad5f398
SHA256 f06abd43e7e1fff8f06c8b61ddffe18157230b38e5145717ca74d4e163dd39e4
MD5 95319d597e6f83b4e06cf8205f749a23
SHA1 16c820d94ae9e9bf3eb6b28d739b570bbc91121e
SHA512 ab1b799eba20fa351e0739d80ce20dd059124b6bd4275fc25b2a522974925d27c903f85cab931bd63cdfe9131773dee38fb59c83b835ddf562c337fc50f5f39f
SSDEEP 3072:psq/3HMAgut5NDhxRerlqTm/lz3BJnsHly+a5WjjlnKvhjXpEnNnw3w6S8hZE:Sq/cutDhmpWql7k45WjBnKv0ntw0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20025

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW GetLastError OpenJobObjectA VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetProcAddress GetThreadContext HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing