file[.]exe | Triage™

General

Target
file.exe
Size 286KB
Sample221106-e5zkwafbbk
SHA256 de2f289f77c67e66c0ba1d476bc5356309513a2a3a7eb32b618a4b71afe8ccf2
MD5 21e1eef72e17c352692ef0be36c570e4
SHA1 9f86c47eae56197854c5518db9994c34fbbdca67
SHA512 6e3f0fe0f96ecc65474aac88afbdd0b5050db6ea00c5f4fbbd2814179ebafc669a18004b7809102dac35d5f8b305143541deeae52eb9ba8e12ab715d957ebef1
SSDEEP 3072:8UaJHSrZPjoCNOxh45ESyePTPqWbAhGGvRQvAWsDx3MYYrAsW+FnE:8JJiPj8LJSyqPqSA0wRFRuk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 286KB

file.exe

IMPHASH 9d46d40b28d0175bbaa9678ea5bc2c14
SHA256 de2f289f77c67e66c0ba1d476bc5356309513a2a3a7eb32b618a4b71afe8ccf2
MD5 21e1eef72e17c352692ef0be36c570e4
SHA1 9f86c47eae56197854c5518db9994c34fbbdca67
SHA512 6e3f0fe0f96ecc65474aac88afbdd0b5050db6ea00c5f4fbbd2814179ebafc669a18004b7809102dac35d5f8b305143541deeae52eb9ba8e12ab715d957ebef1
SSDEEP 3072:8UaJHSrZPjoCNOxh45ESyePTPqWbAhGGvRQvAWsDx3MYYrAsW+FnE:8JJiPj8LJSyqPqSA0wRFRuk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19899

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW LCMapStringA GetConsoleAliasesW CreateMutexW GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA GetModuleHandleA GetFileAttributesExW GetTempPathA LCMapStringW GetLastError GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing