file[.]exe | Triage™

General

Target
file.exe
Size 286KB
Sample221106-bdsfpschem
SHA256 4e0762cb19cda0037ceca9c904ef0fb2f0f2443127d49a92170eb6a0ce337ce9
MD5 4bd8e9b343bfefe48374649a0c9024b7
SHA1 8fcf128e40e4f2a81b8bde1a6f7c8f42fa86eed7
SHA512 32ff288df75a18905dd8e86507b22805d370f54cb6922168362f9b0d258241aec447919744f4fb81299c7e7b5e8df4e3979620becc4fb75df632288034dbe5cf
SSDEEP 3072:oNeKY+jOuvBF5h45ED1ImapkH6HdENCLTmlCsMnj8yaN0E4IRMzfE:oO+j3jJia8qCL016RIWz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 286KB

file.exe

IMPHASH 9d46d40b28d0175bbaa9678ea5bc2c14
SHA256 4e0762cb19cda0037ceca9c904ef0fb2f0f2443127d49a92170eb6a0ce337ce9
MD5 4bd8e9b343bfefe48374649a0c9024b7
SHA1 8fcf128e40e4f2a81b8bde1a6f7c8f42fa86eed7
SHA512 32ff288df75a18905dd8e86507b22805d370f54cb6922168362f9b0d258241aec447919744f4fb81299c7e7b5e8df4e3979620becc4fb75df632288034dbe5cf
SSDEEP 3072:oNeKY+jOuvBF5h45ED1ImapkH6HdENCLTmlCsMnj8yaN0E4IRMzfE:oO+j3jJia8qCL016RIWz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19899

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW CreateMutexW GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing