file[.]exe | Triage™

General

Target
file.exe
Size 371KB
Sample221111-a3gvtsffg2
SHA256 2da18481e0cd85d60ffd6a5c30ad59dc33fb3147a347610618318b6c0840c5b5
MD5 2ece9c26548f57b7bbf291014f14686c
SHA1 1eed58d45b808a94500d4e04f0d40eb34f67ae9a
SHA512 bc113e707d14a113619e3db7d5c188451e1bb391f7b68dbd56aaad22c19e8eb775ca0c868bf5fefb8d7683fc78ecce631e014f75dc6dd40dfdb2c26c0a62acb2
SSDEEP 6144:cr1DuXLDTzJDIOBBTt/AVVXLTKtXwOu1ql:crg/TzJEkBhKwUql
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 371KB

file.exe

IMPHASH aac454bd9c27c59510a0bbc09fbd7552
SHA256 2da18481e0cd85d60ffd6a5c30ad59dc33fb3147a347610618318b6c0840c5b5
MD5 2ece9c26548f57b7bbf291014f14686c
SHA1 1eed58d45b808a94500d4e04f0d40eb34f67ae9a
SHA512 bc113e707d14a113619e3db7d5c188451e1bb391f7b68dbd56aaad22c19e8eb775ca0c868bf5fefb8d7683fc78ecce631e014f75dc6dd40dfdb2c26c0a62acb2
SSDEEP 6144:cr1DuXLDTzJDIOBBTt/AVVXLTKtXwOu1ql:crg/TzJEkBhKwUql
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26882

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA UnhandledExceptionFilter LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection CloseHandle RaiseException WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

shell32

CommandLineToArgvW

Sharing