file[.]exe | Triage™

General

Target
file.exe
Size 429KB
Sample221107-a73m4aada5
SHA256 22776deccfaaf5669bc366b46eb9710aaae7fd4470f2d404ed32e2cbb7369736
MD5 9bdc4f241dee7639186ccbffb7cf00b5
SHA1 a4c067dc58d8b89fce57ef68ee0b1e9ccf3515d9
SHA512 f88c6542aecfe8e30e0fbfe0f148b0aaa7d0444a6664b33a3813927b32c5abd535525de90f5f08919c7f82112cf58655820c6a4b9eb7e53165f5d5978ed89013
SSDEEP 6144:dkTnN0sKNKKhWblo6e/PLFLs8jl5+E2oEWf+3v/c5fDEhtM6oevA8uZu5N:OnNdeKKhWZo6YLvjl5+E/+M9EhtBo+N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 429KB

file.exe

IMPHASH 41a34f80b75e2af584400bd19da6905e
SHA256 22776deccfaaf5669bc366b46eb9710aaae7fd4470f2d404ed32e2cbb7369736
MD5 9bdc4f241dee7639186ccbffb7cf00b5
SHA1 a4c067dc58d8b89fce57ef68ee0b1e9ccf3515d9
SHA512 f88c6542aecfe8e30e0fbfe0f148b0aaa7d0444a6664b33a3813927b32c5abd535525de90f5f08919c7f82112cf58655820c6a4b9eb7e53165f5d5978ed89013
SSDEEP 6144:dkTnN0sKNKKhWblo6e/PLFLs8jl5+E2oEWf+3v/c5fDEhtM6oevA8uZu5N:OnNdeKKhWZo6YLvjl5+E/+M9EhtBo+N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GlobalAlloc CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetConsoleAliasExesLengthA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter SetProcessWorkingSetSize OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA LCMapStringW GetConsoleAliasesW GetThreadContext HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer CloseHandle RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing