file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221105-yem9psbfhl
SHA256 9b86842488d81bd70df3fc70de8ee02e2f8d9c30855bd50a1747d7e2009bdda6
MD5 604fd9ad1eda063a6fa4550f7a50be1d
SHA1 32a91913b634f4821e1e5a7eb3a26f9f94997bfc
SHA512 01d9806ed392b0965df99153d924506e877af4732ee96cdbbb9842cacfb196cb7b4adb57b86c1440c365e212c0a74189e41bbb3f24e1d2daab107f70b86f7387
SSDEEP 6144:IqrWQtxgyglKzSyej5Qz0L2n3FsPa4yVQlsGS0jStbQ:IqrdvgyaKzNej5QzUU3AjE71eS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH bd95b0aa9352043cb92dbf626ad5f398
SHA256 9b86842488d81bd70df3fc70de8ee02e2f8d9c30855bd50a1747d7e2009bdda6
MD5 604fd9ad1eda063a6fa4550f7a50be1d
SHA1 32a91913b634f4821e1e5a7eb3a26f9f94997bfc
SHA512 01d9806ed392b0965df99153d924506e877af4732ee96cdbbb9842cacfb196cb7b4adb57b86c1440c365e212c0a74189e41bbb3f24e1d2daab107f70b86f7387
SSDEEP 6144:IqrWQtxgyglKzSyej5Qz0L2n3FsPa4yVQlsGS0jStbQ:IqrdvgyaKzNej5QzUU3AjE71eS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20025

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW GetLastError OpenJobObjectA VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetTempPathA LCMapStringW GetProcAddress GetThreadContext HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer RaiseException InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

Sharing