file[.]exe | Triage™

General

Target
file.exe
Size 411KB
Sample221110-17xpysefd9
SHA256 6bc02476bf93a0ba0b1dde1c66afce5979f2e72ef698470ccbc465af0d92c47d
MD5 03b11a155032975798fbc975c37e3320
SHA1 e7323c9eb346138b8ab11381187efbe322554d0f
SHA512 bc87187603a8139994abffa76f02adb9e745b1900cbe0e76883ee5d2742ee1e0e2c35d7a5cf3ee65ea034becbfa592f6899179f63accc53e73a88e7c78778b1d
SSDEEP 6144:/WrzEqLghtPNSOehTz3zqRbiiZMO+FXwOu1ql:/WN0htYVzmRb7AUql
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 411KB

file.exe

IMPHASH 8d78b3b1c838578b04f551eb41967f99
SHA256 6bc02476bf93a0ba0b1dde1c66afce5979f2e72ef698470ccbc465af0d92c47d
MD5 03b11a155032975798fbc975c37e3320
SHA1 e7323c9eb346138b8ab11381187efbe322554d0f
SHA512 bc87187603a8139994abffa76f02adb9e745b1900cbe0e76883ee5d2742ee1e0e2c35d7a5cf3ee65ea034becbfa592f6899179f63accc53e73a88e7c78778b1d
SSDEEP 6144:/WrzEqLghtPNSOehTz3zqRbiiZMO+FXwOu1ql:/WN0htYVzmRb7AUql
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26834

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection CloseHandle RaiseException WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

shell32

CommandLineToArgvW

Sharing