file[.]exe | Triage™

General

Target
file.exe
Size 310KB
Sample221106-2fycvaebf3
SHA256 3967df1e830ae986400343bdedfa0914165a3f279825dd12cbf4a1015ce65214
MD5 be3e3d3a8c802fb640843455f08a5ad8
SHA1 620dd648fdda24527224736218e930887df463cd
SHA512 24e47296e4744c3dc4032f55fdc5a5cbe2574697146cce31a563bf49b48ba9229d05ede846d7be13d0e5c24a42e7eaae013a15829db98dd20383974249541bc2
SSDEEP 3072:u3O5nmhg5Uo57ulVRUNfqcjy1c+6VsYV0k4/zR7e7TClZHk9vzdSB8E4:l5nk5auLeRqce1c1DVi/z1eGMvpg54
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 310KB

file.exe

IMPHASH ba69282ae077dea26b6ba5aedfafde2a
SHA256 3967df1e830ae986400343bdedfa0914165a3f279825dd12cbf4a1015ce65214
MD5 be3e3d3a8c802fb640843455f08a5ad8
SHA1 620dd648fdda24527224736218e930887df463cd
SHA512 24e47296e4744c3dc4032f55fdc5a5cbe2574697146cce31a563bf49b48ba9229d05ede846d7be13d0e5c24a42e7eaae013a15829db98dd20383974249541bc2
SSDEEP 3072:u3O5nmhg5Uo57ulVRUNfqcjy1c+6VsYV0k4/zR7e7TClZHk9vzdSB8E4:l5nk5auLeRqce1c1DVi/z1eGMvpg54
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GlobalAlloc CopyFileW GetFileAttributesW WriteConsoleW GetGeoInfoA GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetConsoleAliasExesLengthA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter SetProcessWorkingSetSize OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA LCMapStringW GetConsoleAliasesW GetThreadContext HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer CloseHandle RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing