file[.]exe | Triage™

General

Target
file.exe
Size 311KB
Sample221107-bxdfwsbea6
SHA256 8903f42eec9908e9983634d77fc14b63d3872bfcb8c6d77a886a9f4ca21c485f
MD5 6abf7b3de6d509b707c65a4c5306e720
SHA1 cb93969b096ca755d57cc3882fa551d1fd6648e1
SHA512 215ce1727bf6b744622a86e3df9a5eac694eab35922b48cc50cfd53ee56362f98e1deb50df5b62b2895a34e29c3525ce4d02fb01614ccd14f38d9a01d8de66de
SSDEEP 3072:csZI+nBmGT+5rycqbyqSECW5IU53CvKxqOtW2aKxNyBqUFk0zLIGD7qHV8B8EN:M+nV0yYHUMOtW+SBqOkW5N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 311KB

file.exe

IMPHASH 41a34f80b75e2af584400bd19da6905e
SHA256 8903f42eec9908e9983634d77fc14b63d3872bfcb8c6d77a886a9f4ca21c485f
MD5 6abf7b3de6d509b707c65a4c5306e720
SHA1 cb93969b096ca755d57cc3882fa551d1fd6648e1
SHA512 215ce1727bf6b744622a86e3df9a5eac694eab35922b48cc50cfd53ee56362f98e1deb50df5b62b2895a34e29c3525ce4d02fb01614ccd14f38d9a01d8de66de
SSDEEP 3072:csZI+nBmGT+5rycqbyqSECW5IU53CvKxqOtW2aKxNyBqUFk0zLIGD7qHV8B8EN:M+nV0yYHUMOtW+SBqOkW5N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GlobalAlloc CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetConsoleAliasExesLengthA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter SetProcessWorkingSetSize OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA LCMapStringW GetConsoleAliasesW GetThreadContext HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer CloseHandle RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing