file[.]exe | Triage™

General

Target
file.exe
Size 936KB
Sample221108-lrmsgscbgl
SHA256 e0e00cdc8131a6cb50c336eb05dbc4d7f47a6a77aaad73b2ed869d2fc93abe40
MD5 a7763f2e09e1ad781b906f652c633250
SHA1 f6bfdfcef1d4896b5e7065fa37904ba912263b5a
SHA512 05765d6a4db836c12c396b2858882db1e9a89ef82724b0e1d2584a0b81a9ec9d6f3524b1d2100d3a7a1c0dd67b1a2583af79ab9453b280397a6977f07209f59d
SSDEEP 3072:8YXeEmQ9g+bsYYFveTvux6IhOtTs5Ri/Wzs8zZbnDvJ2qlGqG111JvXy0RhPZKwI:8YXbxhGvDLzthLJ2qlS11dX7Q3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 936KB

file.exe

IMPHASH c1bdb9325800e33a6d452472edfc4b20
SHA256 e0e00cdc8131a6cb50c336eb05dbc4d7f47a6a77aaad73b2ed869d2fc93abe40
MD5 a7763f2e09e1ad781b906f652c633250
SHA1 f6bfdfcef1d4896b5e7065fa37904ba912263b5a
SHA512 05765d6a4db836c12c396b2858882db1e9a89ef82724b0e1d2584a0b81a9ec9d6f3524b1d2100d3a7a1c0dd67b1a2583af79ab9453b280397a6977f07209f59d
SSDEEP 3072:8YXeEmQ9g+bsYYFveTvux6IhOtTs5Ri/Wzs8zZbnDvJ2qlGqG111JvXy0RhPZKwI:8YXbxhGvDLzthLJ2qlS11dX7Q3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement InitializeCriticalSectionAndSpinCount GetEnvironmentVariableW MultiByteToWideChar GetLastError LoadLibraryA lstrcatW RaiseException DecodePointer GetProcAddress DeleteCriticalSection GetConsoleWindow CreateFileW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle GetProcessHeap IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection WideCharToMultiByte LocalFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EncodePointer RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetACP HeapFree HeapAlloc CompareStringW LCMapStringW GetFileType HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

user32

wsprintfW

oleaut32

SafeArrayGetDim VariantInit SafeArrayGetUBound SafeArrayGetLBound SysFreeString SysAllocString VariantCopy SysAllocStringLen SafeArrayAccessData VariantClear GetErrorInfo

Sharing