file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221106-se1bdagdb3
SHA256 7823f338e60f3f64becb7c5dec72d14cb2bcf8de10e0ae2745eff7be66027f68
MD5 8139ffde33b829b07f5119240b05c871
SHA1 6874e660f86903268b12c84ab4bb58f0a5bcf254
SHA512 0e2081ca93b4e848cc56e91cdbc9110531e2123b5f637e71d628c7892d667c18df0ecd9d285b8980946b7e3d759a6fc70bbd1fe0fff3565ec8df35cdcf680f8b
SSDEEP 6144:Tiy4atlo/rcOa/MU08/ClJeQp6Z2FlZg2SM+Z:TiHnJaEBE49Sx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH 9541d91bd65ce9b32e5e0f1323e4f04a
SHA256 7823f338e60f3f64becb7c5dec72d14cb2bcf8de10e0ae2745eff7be66027f68
MD5 8139ffde33b829b07f5119240b05c871
SHA1 6874e660f86903268b12c84ab4bb58f0a5bcf254
SHA512 0e2081ca93b4e848cc56e91cdbc9110531e2123b5f637e71d628c7892d667c18df0ecd9d285b8980946b7e3d759a6fc70bbd1fe0fff3565ec8df35cdcf680f8b
SSDEEP 6144:Tiy4atlo/rcOa/MU08/ClJeQp6Z2FlZg2SM+Z:TiHnJaEBE49Sx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20142

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA GetCommState WaitNamedPipeA SetFirmwareEnvironmentVariableA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GlobalAlloc LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile lstrlenW CreateMutexW GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter CreateHardLinkW OpenJobObjectW FindNextFileA GetModuleHandleA GetTempPathA LCMapStringW LCMapStringA GetThreadContext HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer CloseHandle RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing