file[.]exe | Triage™

General

Target
file.exe
Size 355KB
Sample221108-l3dc7aahe9
SHA256 f7e5f54f191a24a82817b043e7e69e2d4e5206deba503de68a1d163b08d0ee8e
MD5 13f8da26450ba6f7132c1f761609c512
SHA1 0eef6ef4852211dbb60209c7532b0ae5f1b43e3a
SHA512 959db6d9178067e404fda2b38e8ad99620a19ead153c1c753ef2a4b9bbf71c7a06469030031fc81f732a2f5678a16c3c8e9b4e19f390ac0c103af18c6cd40b91
SSDEEP 6144:yhSh82NXJg9WmuTbqYoGxhXmYM/fIIAOBbHUKKafrsi/AYIH74snKF2rxpm:d/muTbqYjMoI/bHzn//AY4+2tA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 355KB

file.exe

IMPHASH 8f261471f458a6b7bd02e550eb959ef4
SHA256 f7e5f54f191a24a82817b043e7e69e2d4e5206deba503de68a1d163b08d0ee8e
MD5 13f8da26450ba6f7132c1f761609c512
SHA1 0eef6ef4852211dbb60209c7532b0ae5f1b43e3a
SHA512 959db6d9178067e404fda2b38e8ad99620a19ead153c1c753ef2a4b9bbf71c7a06469030031fc81f732a2f5678a16c3c8e9b4e19f390ac0c103af18c6cd40b91
SSDEEP 6144:yhSh82NXJg9WmuTbqYoGxhXmYM/fIIAOBbHUKKafrsi/AYIH74snKF2rxpm:d/muTbqYjMoI/bHzn//AY4+2tA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34370

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessorNumber GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess WideCharToMultiByte EncodePointer DecodePointer InitializeCriticalSectionEx LCMapStringEx GetStringTypeW GetCPInfo CreateFileW RaiseException RtlUnwind GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc HeapSize WriteConsoleW

Sharing