file[.]exe | Triage™

General

Target
file.exe
Size 504KB
Sample221110-2pdd2aehd4
SHA256 480df6380ffa33d03a5edd961ad85847e436e84ec7ff22fcefa708b04952b09b
MD5 e97e1b5a8a60224a92623cce93bba0cd
SHA1 7d6325ff6d4c816bb2c7cbc35450ce02b4b36f8b
SHA512 a45574374555f4a3f0aeb61697f424b340ab058adc35e1722f9a5b80fa9904fb62b3904ad60db9b7a1627631cf8597e25fa44b0e6e3c502652343f3b70e4381c
SSDEEP 6144:VQ0ikH4LmiBEalKAkYPAEzcQb/GhBjyYTJ6mgLtyxpP0D6f4Kw2AVXPXwOu1qll:VQVyiBdLnDcQb/WfYmgLEA6ApUqll
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 504KB

file.exe

IMPHASH 8d78b3b1c838578b04f551eb41967f99
SHA256 480df6380ffa33d03a5edd961ad85847e436e84ec7ff22fcefa708b04952b09b
MD5 e97e1b5a8a60224a92623cce93bba0cd
SHA1 7d6325ff6d4c816bb2c7cbc35450ce02b4b36f8b
SHA512 a45574374555f4a3f0aeb61697f424b340ab058adc35e1722f9a5b80fa9904fb62b3904ad60db9b7a1627631cf8597e25fa44b0e6e3c502652343f3b70e4381c
SSDEEP 6144:VQ0ikH4LmiBEalKAkYPAEzcQb/GhBjyYTJ6mgLtyxpP0D6f4Kw2AVXPXwOu1qll:VQVyiBdLnDcQb/WfYmgLEA6ApUqll
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26850

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection CloseHandle RaiseException WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

shell32

CommandLineToArgvW

Sharing