file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221106-becrmscher
SHA256 ff891d75cbf96e80530df61616e0dd6ffac80468c7b7edd8a2b23d8e6ea39294
MD5 8485eb34c067e91651999c508489ee24
SHA1 8d3444c9e63d5ab05fbee780175dda15779526a8
SHA512 4a939af1f0ccf8fc68ed87ce71227bc867ed84981829b57a9f226c8c67c9ac0f9f0138693982473823451b69718a3332bc700e8cc286caa97dcfb9a07cccb2d1
SSDEEP 6144:k3vHRYj8LJuSbs2RCD0TLHsLwO22LKyjRVYGvw:wYj80URCQbsL26KyP7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH 9d46d40b28d0175bbaa9678ea5bc2c14
SHA256 ff891d75cbf96e80530df61616e0dd6ffac80468c7b7edd8a2b23d8e6ea39294
MD5 8485eb34c067e91651999c508489ee24
SHA1 8d3444c9e63d5ab05fbee780175dda15779526a8
SHA512 4a939af1f0ccf8fc68ed87ce71227bc867ed84981829b57a9f226c8c67c9ac0f9f0138693982473823451b69718a3332bc700e8cc286caa97dcfb9a07cccb2d1
SSDEEP 6144:k3vHRYj8LJuSbs2RCD0TLHsLwO22LKyjRVYGvw:wYj80URCQbsL26KyP7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19899

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW CreateMutexW GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing