file[.]exe | Triage™

General

Target
file.exe
Size 285KB
Sample221106-a47smsade8
SHA256 0db7c2b665f89c60f04f93f647659da9b645ca6fc5a3215d91267799dc8dda94
MD5 71bb82a241012e7b55720c491ebbd0ed
SHA1 5022637f18493b5ec40691c90d32ce5bdada0c1d
SHA512 b9da21d964768bb19c764f0d9443a51c3e1d319da87575a97433f1e77bf6196c078a2c062655ee7069cba8f93473149ed3cbfbb2d3a1753f537fd97f1887f4d9
SSDEEP 3072:aW17mt5Tj1cXY5h45ELJBFCoSGsxJ67Whe+PpXFpMmQ2vl98ZHlKmpiujGlE:aCKdjtjJRFSJLhXB0mPvl98ZHl3piuG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 285KB

file.exe

IMPHASH 9d46d40b28d0175bbaa9678ea5bc2c14
SHA256 0db7c2b665f89c60f04f93f647659da9b645ca6fc5a3215d91267799dc8dda94
MD5 71bb82a241012e7b55720c491ebbd0ed
SHA1 5022637f18493b5ec40691c90d32ce5bdada0c1d
SHA512 b9da21d964768bb19c764f0d9443a51c3e1d319da87575a97433f1e77bf6196c078a2c062655ee7069cba8f93473149ed3cbfbb2d3a1753f537fd97f1887f4d9
SSDEEP 3072:aW17mt5Tj1cXY5h45ELJBFCoSGsxJ67Whe+PpXFpMmQ2vl98ZHlKmpiujGlE:aCKdjtjJRFSJLhXB0mPvl98ZHl3piuG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19899

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW CreateMutexW GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing