file[.]exe | Triage™

General

Target
file.exe
Size 347KB
Sample221107-vjj63ahaa2
SHA256 0cb1bd5e42c2c36180da286a6fea506828bca2b52ce90a33efa79b2a1bbc087c
MD5 9bbd62895813663f3a147aab8c727c4a
SHA1 16a43574370271519081c038250d5a8f2ef9a86a
SHA512 030bc4d77da9af1ad69e6f7e67d3a862cb083d600022279989388c60ba0c57114c51f118b8438f47c752be035bec4629012330887c0c8b697542a45b5d520b98
SSDEEP 6144:sW1tgNcfMQkIFE09cOwvCC2wwKwUAOTJYJfPfc+freo5JSjZY85iX:sW1tucfMQkIFE0wcwNknL5z/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 347KB

file.exe

IMPHASH e2a07bb4b81e6c6d0f72670722ee7e56
SHA256 0cb1bd5e42c2c36180da286a6fea506828bca2b52ce90a33efa79b2a1bbc087c
MD5 9bbd62895813663f3a147aab8c727c4a
SHA1 16a43574370271519081c038250d5a8f2ef9a86a
SHA512 030bc4d77da9af1ad69e6f7e67d3a862cb083d600022279989388c60ba0c57114c51f118b8438f47c752be035bec4629012330887c0c8b697542a45b5d520b98
SSDEEP 6144:sW1tgNcfMQkIFE09cOwvCC2wwKwUAOTJYJfPfc+freo5JSjZY85iX:sW1tucfMQkIFE0wcwNknL5z/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36402

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess CreateThread GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CreateFileW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing