file[.]exe | Triage™

General

Target
file.exe
Size 404KB
Sample221106-1eq2psegck
SHA256 2294dbd4c4810a541911958cb93040e7502b77d4e9e27fddbe9df1937c80ac69
MD5 3e511cec72bb51a26092d69e2713544c
SHA1 cf7efecbf831742cfbf7b7b8b667639dda848423
SHA512 fc5df31c54a7d85ead52ee65128710d03f836ecb34a736d49a5d2c50d1bad7400044983d7ed94f01a623ae897de180c51d0531cb46dbefc8990939946a09a11d
SSDEEP 6144:tQPnBd/huMR4LOqsjI13/P0GSoG5oqFXEJXCANbL:6nTZuMqiqtPtSo+oqFUJXCAZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 404KB

file.exe

IMPHASH ac8a9d28fd57cc5434c220cfd849d57e
SHA256 2294dbd4c4810a541911958cb93040e7502b77d4e9e27fddbe9df1937c80ac69
MD5 3e511cec72bb51a26092d69e2713544c
SHA1 cf7efecbf831742cfbf7b7b8b667639dda848423
SHA512 fc5df31c54a7d85ead52ee65128710d03f836ecb34a736d49a5d2c50d1bad7400044983d7ed94f01a623ae897de180c51d0531cb46dbefc8990939946a09a11d
SSDEEP 6144:tQPnBd/huMR4LOqsjI13/P0GSoG5oqFXEJXCANbL:6nTZuMqiqtPtSo+oqFUJXCAZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19998

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA GetCommState WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GlobalAlloc CopyFileW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile GetVolumePathNameA lstrlenW LCMapStringA CreateMutexW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter CreateHardLinkW OpenJobObjectW FindNextFileA GetModuleHandleA GetTempPathA LCMapStringW GetConsoleAliasesW GetThreadContext HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer CloseHandle RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing