file[.]exe | Triage™

General

Target
file.exe
Size 429KB
Sample221106-2ghnsaebh5
SHA256 c3f59902b0e794c330d7c7e4bf61b7630c96cf625c4282d458862e0aff7d8036
MD5 0cf19eeb22286faa96872f0e80d6057e
SHA1 f55469200664b33e403678d7d3c80ec970366021
SHA512 79761f021129bd8783c030c7969a73df1ef52cb8dcf94377ba9817160603ce4f90aa46d6a29c109f2d61b29362dd1c53a9ea6f36e31241e9b207d97091fcc1dd
SSDEEP 6144:zvgndalZGegVQku2hkhshZMwtDer3Z/8LkHoID7SVgxNAsb1YQGDbA754:Mnd/VQk/hkGfVt6TZ/EGDagbZPl4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 429KB

file.exe

IMPHASH ba69282ae077dea26b6ba5aedfafde2a
SHA256 c3f59902b0e794c330d7c7e4bf61b7630c96cf625c4282d458862e0aff7d8036
MD5 0cf19eeb22286faa96872f0e80d6057e
SHA1 f55469200664b33e403678d7d3c80ec970366021
SHA512 79761f021129bd8783c030c7969a73df1ef52cb8dcf94377ba9817160603ce4f90aa46d6a29c109f2d61b29362dd1c53a9ea6f36e31241e9b207d97091fcc1dd
SSDEEP 6144:zvgndalZGegVQku2hkhshZMwtDer3Z/8LkHoID7SVgxNAsb1YQGDbA754:Mnd/VQk/hkGfVt6TZ/EGDagbZPl4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GlobalAlloc CopyFileW GetFileAttributesW WriteConsoleW GetGeoInfoA GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetConsoleAliasExesLengthA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter SetProcessWorkingSetSize OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA LCMapStringW GetConsoleAliasesW GetThreadContext HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer CloseHandle RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing