file[.]exe | Triage™

General

Target
file.exe
Size 324KB
Sample221105-xpr5zabebm
SHA256 4e95977cc449b03ee7281e20b1a655e6ef8bda8eaea621557ca0ba545815a3f4
MD5 ec6406dc1ee22b9ee3ea89c1977550cd
SHA1 f5f9d1464823bf95d06fc1a70de58e39e609b942
SHA512 0cd6a7f3498b2e751040944c72615fa90915c9b7ffdd8b5e3f75180e77660175eca8128e5172bb5aaa31642c1ede026c83b400c65550f82c79f69028e3d61d15
SSDEEP 3072:RhqVAkAght5Nx5x67Redg2+ZGOlVKr5And10IwjuL1yOe+jXGhuTrLeiHk+E:LqFhtHYUg2oGGVy5And104fXGhmHFH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 324KB

file.exe

IMPHASH bd95b0aa9352043cb92dbf626ad5f398
SHA256 4e95977cc449b03ee7281e20b1a655e6ef8bda8eaea621557ca0ba545815a3f4
MD5 ec6406dc1ee22b9ee3ea89c1977550cd
SHA1 f5f9d1464823bf95d06fc1a70de58e39e609b942
SHA512 0cd6a7f3498b2e751040944c72615fa90915c9b7ffdd8b5e3f75180e77660175eca8128e5172bb5aaa31642c1ede026c83b400c65550f82c79f69028e3d61d15
SSDEEP 3072:RhqVAkAght5Nx5x67Redg2+ZGOlVKr5And10IwjuL1yOe+jXGhuTrLeiHk+E:LqFhtHYUg2oGGVy5And104fXGhmHFH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20025

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW GetLastError OpenJobObjectA VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetProcAddress GetThreadContext HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing