file[.]exe | Triage™

General

Target
file.exe
Size 286KB
Sample221105-xn75ssbeap
SHA256 29259261d8cb33423bce3fe3bc3fc0cb06de16c8ad3f0975384fc997cc16e235
MD5 1cee64171a9d8c56de13fe4eb4e5ef04
SHA1 831e2e71a277e8f531ebc91421952468662d3eef
SHA512 bc26bfc7bff61ae30d6843cc0d852aa07f79dd6d80dd40e24a1a6a639757aa4336cc67f8dbdf630a68ca397449b60bab061afed33ab5d560c289af4358790dc8
SSDEEP 3072:XSqMCOAg8t5NjApRs+CoaXZZ5BC9dZhhDXrE:CqS8t0sL3ZZafZX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 286KB

file.exe

IMPHASH bd95b0aa9352043cb92dbf626ad5f398
SHA256 29259261d8cb33423bce3fe3bc3fc0cb06de16c8ad3f0975384fc997cc16e235
MD5 1cee64171a9d8c56de13fe4eb4e5ef04
SHA1 831e2e71a277e8f531ebc91421952468662d3eef
SHA512 bc26bfc7bff61ae30d6843cc0d852aa07f79dd6d80dd40e24a1a6a639757aa4336cc67f8dbdf630a68ca397449b60bab061afed33ab5d560c289af4358790dc8
SSDEEP 3072:XSqMCOAg8t5NjApRs+CoaXZZ5BC9dZhhDXrE:CqS8t0sL3ZZafZX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20025

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW GetLastError OpenJobObjectA VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetProcAddress GetThreadContext HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing