file[.]exe | Triage™

General

Target
file.exe
Size 286KB
Sample221106-p9r2pscee9
SHA256 cbf2972583dc438f4afda7cf3304d9cf0715224ef4cb28890716f4db48436090
MD5 6a7cec5f400a75bc4ba866d1742283d8
SHA1 d2f8c9b43994887b7ec979f513d9343020d0914d
SHA512 55e974bae6b65a26ca4c9dbe1c53f1d1fb5d9b5f06cdcdd423d086c19f6aa1738620ae013eeb7da382341ed1d9c04611833067bff1cadb09b584d1d2e269a09d
SSDEEP 3072:NiLpBiK3iV1i/A5LprRjCSe2RqbVvZQmaedctd91YOALASnvA:cijGaprRde22ZZvaedgRbALXv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 286KB

file.exe

IMPHASH 9541d91bd65ce9b32e5e0f1323e4f04a
SHA256 cbf2972583dc438f4afda7cf3304d9cf0715224ef4cb28890716f4db48436090
MD5 6a7cec5f400a75bc4ba866d1742283d8
SHA1 d2f8c9b43994887b7ec979f513d9343020d0914d
SHA512 55e974bae6b65a26ca4c9dbe1c53f1d1fb5d9b5f06cdcdd423d086c19f6aa1738620ae013eeb7da382341ed1d9c04611833067bff1cadb09b584d1d2e269a09d
SSDEEP 3072:NiLpBiK3iV1i/A5LprRjCSe2RqbVvZQmaedctd91YOALASnvA:cijGaprRde22ZZvaedgRbALXv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20142

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA GetCommState WaitNamedPipeA SetFirmwareEnvironmentVariableA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GlobalAlloc LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW CreateMutexW GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter CreateHardLinkW OpenJobObjectW FindNextFileA GetModuleHandleA GetTempPathA LCMapStringW LCMapStringA GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer CloseHandle RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing