file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221106-pc6htsdbcl
SHA256 fbe8fdf1bbe24ba412fe0d4171571af2fc5a6ae2b10809b39be614fef058859b
MD5 4890721d792eb1956be28f33c46f179d
SHA1 03132c9e49bd75f843206feaceb6256ae89dd5cb
SHA512 556810c786806357a118ac9c01a81cc00a591ca77d9647e58ca7bd1ed24cf1ac2e7d76382508acdc69e3ec953b2e5327fb8b85d67477df2c2a9e2f7de12c9145
SSDEEP 6144:Qfiv3tFLWCRCPJQyk4ebTrS7NJR6FxHsNrYgsr+tOG5Hov2Tz1ch2l+:QifDvRyJQyk7rS7Z6FAsgo+tbOviab
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH 2007e819030a9c2e7f4859f5119bc3fd
SHA256 fbe8fdf1bbe24ba412fe0d4171571af2fc5a6ae2b10809b39be614fef058859b
MD5 4890721d792eb1956be28f33c46f179d
SHA1 03132c9e49bd75f843206feaceb6256ae89dd5cb
SHA512 556810c786806357a118ac9c01a81cc00a591ca77d9647e58ca7bd1ed24cf1ac2e7d76382508acdc69e3ec953b2e5327fb8b85d67477df2c2a9e2f7de12c9145
SSDEEP 6144:Qfiv3tFLWCRCPJQyk4ebTrS7NJR6FxHsNrYgsr+tOG5Hov2Tz1ch2l+:QifDvRyJQyk7rS7Z6FAsgo+tbOviab
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20030

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA OpenJobObjectA GetCommState WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW CreateMutexW GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter CreateHardLinkW FindNextFileA GetModuleHandleA GetTempPathA LCMapStringW LCMapStringA GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer CloseHandle RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing