file[.]exe | Triage™

General

Target
file.exe
Size 351KB
Sample221106-kgetfsedcn
SHA256 409906e16109f7199b02a018752dec234a9cde73679456f2bb2a5d1c18b44117
MD5 c665caac97ff5e3657673c2aa985d8de
SHA1 d931b440321cb31ab18eeefa385aa2367373b7ff
SHA512 eb15c140d50acb479b145ef6fd849c1fe6927ebc31595cfd092b6f83907da447590f302f364aa6ebc77ef1be79ccbd4cc850b42907d82d52537bdf5905b62e35
SSDEEP 6144:AFqIKkiaKgYjNRAAhtEFwcTAwNBjhHAOMk7Ua1mSgReaYo5yEl4+nK4J8L3:AFqIPi8YjNRAAhAJ6IUaiYoBl+3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 351KB

file.exe

IMPHASH 00f742911a61c8d18b42b6d58979f845
SHA256 409906e16109f7199b02a018752dec234a9cde73679456f2bb2a5d1c18b44117
MD5 c665caac97ff5e3657673c2aa985d8de
SHA1 d931b440321cb31ab18eeefa385aa2367373b7ff
SHA512 eb15c140d50acb479b145ef6fd849c1fe6927ebc31595cfd092b6f83907da447590f302f364aa6ebc77ef1be79ccbd4cc850b42907d82d52537bdf5905b62e35
SSDEEP 6144:AFqIKkiaKgYjNRAAhtEFwcTAwNBjhHAOMk7Ua1mSgReaYo5yEl4+nK4J8L3:AFqIPi8YjNRAAhAJ6IUaiYoBl+3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38338

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess CreateThread GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CreateFileW HeapSize GetProcessHeap SetStdHandle WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW

user32

TranslateMessage LoadIconA

Sharing