file[.]exe | Triage™

General

Target
file.exe
Size 310KB
Sample221107-c1ad3sdca5
SHA256 d491aa1bf7073c6a26e694412f2c7f4ce2d3d8506f8374a2c48d0693d96aba4a
MD5 0269a121a077a48942bcd7c58f36c76c
SHA1 ddb7d4f26f0e8f9e6902d6407f9ae2ae4e803cf4
SHA512 8ec7307202cd704d5d947ac79d0792e5e07438a3602e12dafcb9ac2618a8da367dba680df8e4b9ed28569eca765b8a9807dee313ed702d5a7a01fdd0c32c75f6
SSDEEP 3072:FG9Fyn9ioC+5rb5sYjHv1dWO/6g+O0n8iiH/+9QtLL49bB8Ee:MynS06k1ovg+/8kU475e
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 310KB

file.exe

IMPHASH 41a34f80b75e2af584400bd19da6905e
SHA256 d491aa1bf7073c6a26e694412f2c7f4ce2d3d8506f8374a2c48d0693d96aba4a
MD5 0269a121a077a48942bcd7c58f36c76c
SHA1 ddb7d4f26f0e8f9e6902d6407f9ae2ae4e803cf4
SHA512 8ec7307202cd704d5d947ac79d0792e5e07438a3602e12dafcb9ac2618a8da367dba680df8e4b9ed28569eca765b8a9807dee313ed702d5a7a01fdd0c32c75f6
SSDEEP 3072:FG9Fyn9ioC+5rb5sYjHv1dWO/6g+O0n8iiH/+9QtLL49bB8Ee:MynS06k1ovg+/8kU475e
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GlobalAlloc CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetConsoleAliasExesLengthA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter SetProcessWorkingSetSize OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA LCMapStringW GetConsoleAliasesW GetThreadContext HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer CloseHandle RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleOutputCP CreateFileA

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing