file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221106-b4nv7sdaeq
SHA256 84bdafd2d96535a4bceda05a5bd33db34929a1c7c6519237a9dd9b9e399641c8
MD5 b19daccdd18a88450c7c5309b516db30
SHA1 3002a24909b6a83e83cc25fdaef1de45b9b78d43
SHA512 94711fb0bb6df967f1f1f452fc72c8a5aa2ec8dd123938e02df0a0ea3f00263a75e88575582c00d8170466909d686f274bdee6a72de931370505700970ec5c58
SSDEEP 6144:BzdGljCLJyluyMorcfSNkiMtfo2w2WcU3XC0p160B03H5MW:OjCwlT9NMtQ2Kp160BQHG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH 9d46d40b28d0175bbaa9678ea5bc2c14
SHA256 84bdafd2d96535a4bceda05a5bd33db34929a1c7c6519237a9dd9b9e399641c8
MD5 b19daccdd18a88450c7c5309b516db30
SHA1 3002a24909b6a83e83cc25fdaef1de45b9b78d43
SHA512 94711fb0bb6df967f1f1f452fc72c8a5aa2ec8dd123938e02df0a0ea3f00263a75e88575582c00d8170466909d686f274bdee6a72de931370505700970ec5c58
SSDEEP 6144:BzdGljCLJyluyMorcfSNkiMtfo2w2WcU3XC0p160B03H5MW:OjCwlT9NMtQ2Kp160BQHG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19899

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW CreateMutexW GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing