file[.]exe | Triage™

General

Target
file.exe
Size 503KB
Sample221110-xd2v2aeefm
SHA256 f2cc2dc4260006c10df0349d74f4d2a182e696e42eae6d5321e77da6ac488e27
MD5 833f31ce4c00a98173cf5e4fbdb6714b
SHA1 72d9f0a8d1de38512330a11062d9106500fe64a9
SHA512 46cb6d224f1f69eb3d484fc5dbd3d390154ff707614164c11a0099e9947d4a25d225f1be61f146bfec938a13b0e0434a30ad237553a215fee7f4813507e770bd
SSDEEP 6144:lzXWIFuSLiX6QhENs1seWmIvlHQhX6m5UPR9dtOBRJL6M9vdpWYuxKmxXwOu1ql:lzGsGX6y11+QR2LwJLz9vvFxuUql
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 503KB

file.exe

IMPHASH e4d0e735c5b80d8efd3c6090a334e0c2
SHA256 f2cc2dc4260006c10df0349d74f4d2a182e696e42eae6d5321e77da6ac488e27
MD5 833f31ce4c00a98173cf5e4fbdb6714b
SHA1 72d9f0a8d1de38512330a11062d9106500fe64a9
SHA512 46cb6d224f1f69eb3d484fc5dbd3d390154ff707614164c11a0099e9947d4a25d225f1be61f146bfec938a13b0e0434a30ad237553a215fee7f4813507e770bd
SSDEEP 6144:lzXWIFuSLiX6QhENs1seWmIvlHQhX6m5UPR9dtOBRJL6M9vdpWYuxKmxXwOu1ql:lzGsGX6y11+QR2LwJLz9vvFxuUql
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26818

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetThreadContext GetConsoleAliasExesLengthA OpenJobObjectA WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection CloseHandle RaiseException WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

shell32

CommandLineToArgvW

Sharing