file[.]exe | Triage™

General

Target
file.exe
Size 348KB
Sample221107-w5175secgm
SHA256 47e4f1702bdb782cf54bc63ddfd4d3ab8c914401ec04753b1ce0467e9af8a0df
MD5 8f44bbb2573a908c0e05b70a9ae3e691
SHA1 ab330e18ff3a7259f929837e10b295afef425962
SHA512 0263db87c3608e9e24cd57d2b7e1ce73334782ac6bcbb8f672aa195fe10d27a8aafca462fc79a30cf7106e16201374e5cdbfc9b4c52dd826b7004b002b5e33df
SSDEEP 6144:jp0Y1Xya8wBN0h2go42UqACB9xoageWBMzAO15JYJfPfc+freo5JSjZY8ZAz:jyY1XKw7g2go4XCnz/5knL5zn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 348KB

file.exe

IMPHASH e2a07bb4b81e6c6d0f72670722ee7e56
SHA256 47e4f1702bdb782cf54bc63ddfd4d3ab8c914401ec04753b1ce0467e9af8a0df
MD5 8f44bbb2573a908c0e05b70a9ae3e691
SHA1 ab330e18ff3a7259f929837e10b295afef425962
SHA512 0263db87c3608e9e24cd57d2b7e1ce73334782ac6bcbb8f672aa195fe10d27a8aafca462fc79a30cf7106e16201374e5cdbfc9b4c52dd826b7004b002b5e33df
SSDEEP 6144:jp0Y1Xya8wBN0h2go42UqACB9xoageWBMzAO15JYJfPfc+freo5JSjZY8ZAz:jyY1XKw7g2go4XCnz/5knL5zn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36882

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess CreateThread GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CreateFileW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing