file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221106-v4vtasffak
SHA256 f18f923e42727314fc903f2016f68a1d1872984fc477609fc8cef85b5b13c793
MD5 d00fd596ea300cabaeb20ab7b0daf702
SHA1 684753dfcc52d773394d1f6ed1f15ef7d10b407a
SHA512 8b7da31f2bd0642aca7ecb9946792bdf93b5cf60f91685642e8c9b6d0dd5f2ef1ee79dbe7b05c5d8103ce734a650b91d4086ac8c25233e53f0139f2da0e7e37c
SSDEEP 6144:vcQwnA/H029qrCGW77rjijBgWY1fCpU08gzk:InA/0uoo7r+jBY2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH ac8a9d28fd57cc5434c220cfd849d57e
SHA256 f18f923e42727314fc903f2016f68a1d1872984fc477609fc8cef85b5b13c793
MD5 d00fd596ea300cabaeb20ab7b0daf702
SHA1 684753dfcc52d773394d1f6ed1f15ef7d10b407a
SHA512 8b7da31f2bd0642aca7ecb9946792bdf93b5cf60f91685642e8c9b6d0dd5f2ef1ee79dbe7b05c5d8103ce734a650b91d4086ac8c25233e53f0139f2da0e7e37c
SSDEEP 6144:vcQwnA/H029qrCGW77rjijBgWY1fCpU08gzk:InA/0uoo7r+jBY2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19998

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA GetCommState WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GlobalAlloc CopyFileW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile GetVolumePathNameA lstrlenW LCMapStringA CreateMutexW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter CreateHardLinkW OpenJobObjectW FindNextFileA GetModuleHandleA GetTempPathA LCMapStringW GetConsoleAliasesW GetThreadContext HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer CloseHandle RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing