file[.]exe | Triage™

General

Target
file.exe
Size 286KB
Sample221106-d22qdsahd3
SHA256 be43cb0421fa29cd5c9c0a88231a32dade44c58679e4eed9e951b1b4e7fcf6bc
MD5 9406cd9075e57c5bf28b8a5ab2eb3186
SHA1 de4b70864539064c383ad108e001efa8a74526ec
SHA512 d74e3e4770dbb32057273b57194ffdead87e7bceb57fc14824e0f5b6a0d34f2f7b47ba08f14637b25ecbf876f4186a54d0b56433fee7348a3733115f9828ee62
SSDEEP 3072:BJOFHkgwrjFWXHfxh45ECRIGyjJ/UsgkiWWlEN56Z9Og8SA6L2uE:BEForjE/LJEIOkiW+ENk7ASHL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 286KB

file.exe

IMPHASH 9d46d40b28d0175bbaa9678ea5bc2c14
SHA256 be43cb0421fa29cd5c9c0a88231a32dade44c58679e4eed9e951b1b4e7fcf6bc
MD5 9406cd9075e57c5bf28b8a5ab2eb3186
SHA1 de4b70864539064c383ad108e001efa8a74526ec
SHA512 d74e3e4770dbb32057273b57194ffdead87e7bceb57fc14824e0f5b6a0d34f2f7b47ba08f14637b25ecbf876f4186a54d0b56433fee7348a3733115f9828ee62
SSDEEP 3072:BJOFHkgwrjFWXHfxh45ECRIGyjJ/UsgkiWWlEN56Z9Og8SA6L2uE:BEForjE/LJEIOkiW+ENk7ASHL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19899

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW CreateMutexW GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing