file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample221106-pq62hsbec9
SHA256 35248a2b7b0584c82b05fdeac024982ef096f2fe07bb5d557058209d61e18243
MD5 9ad6c9a655878577c8335bd6cf6aaffd
SHA1 665c6dbb4729f25af1f708bc9fde944fd1fe5b92
SHA512 94115faf6ade71a9097fc1542eb37b568b266ac0f3c3f095ea79564c3ad5d22a942716f1ea3085fba4cbbc3b7f85d36e82ef3e6a8f8cd3c45e351e6d6d43fe3c
SSDEEP 3072:QHX5xiJGvlPjT5bv72i69FxVJgFiW50fDn7HO8NeQZg:i/ioZtCi6zjJg1a9xZg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH 2007e819030a9c2e7f4859f5119bc3fd
SHA256 35248a2b7b0584c82b05fdeac024982ef096f2fe07bb5d557058209d61e18243
MD5 9ad6c9a655878577c8335bd6cf6aaffd
SHA1 665c6dbb4729f25af1f708bc9fde944fd1fe5b92
SHA512 94115faf6ade71a9097fc1542eb37b568b266ac0f3c3f095ea79564c3ad5d22a942716f1ea3085fba4cbbc3b7f85d36e82ef3e6a8f8cd3c45e351e6d6d43fe3c
SSDEEP 3072:QHX5xiJGvlPjT5bv72i69FxVJgFiW50fDn7HO8NeQZg:i/ioZtCi6zjJg1a9xZg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20030

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA OpenJobObjectA GetCommState WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW CreateMutexW GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter CreateHardLinkW FindNextFileA GetModuleHandleA GetTempPathA LCMapStringW LCMapStringA GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer CloseHandle RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing