file[.]exe | Triage™

General

Target
file.exe
Size 285KB
Sample221106-x8cvdsbecl
SHA256 c7b8defbd3ae8def9d2e717d98d891983a0cb60c79477132ff7148761d542252
MD5 29059b641e33ea0c10f360b01d21bd86
SHA1 25ae871b9b59cbfa8dc5f0e1ff49b30c21ac513b
SHA512 acc28cd9f67d08cf4d73c157d95d75efd51b63c71f680fd9c95445114692e94359e872031eb9825ede8ee1e672f50fb69cbf2b8e1dfc3d3c4e01f6b85df0af68
SSDEEP 3072:o72In+1N+h57NhoBtq8s+zuvmI9jIpVEUoTniPjdjNL3:jInX/Nv+UmqIpVEnTajtV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 285KB

file.exe

IMPHASH ac8a9d28fd57cc5434c220cfd849d57e
SHA256 c7b8defbd3ae8def9d2e717d98d891983a0cb60c79477132ff7148761d542252
MD5 29059b641e33ea0c10f360b01d21bd86
SHA1 25ae871b9b59cbfa8dc5f0e1ff49b30c21ac513b
SHA512 acc28cd9f67d08cf4d73c157d95d75efd51b63c71f680fd9c95445114692e94359e872031eb9825ede8ee1e672f50fb69cbf2b8e1dfc3d3c4e01f6b85df0af68
SSDEEP 3072:o72In+1N+h57NhoBtq8s+zuvmI9jIpVEUoTniPjdjNL3:jInX/Nv+UmqIpVEnTajtV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19998

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA GetCommState WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GlobalAlloc CopyFileW GetFileAttributesW WriteConsoleW GetGeoInfoA ReadFile GetVolumePathNameA lstrlenW LCMapStringA CreateMutexW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter CreateHardLinkW OpenJobObjectW FindNextFileA GetModuleHandleA GetTempPathA LCMapStringW GetConsoleAliasesW GetThreadContext HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer CloseHandle RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing