file[.]exe | Triage™

General

Target
file.exe
Size 372KB
Sample221111-cb476aabeq
SHA256 365fe788aa3f4589a3cf5a5ffddf37d93baf301b2d953c804ad03164d21d41dd
MD5 251096a423566f68e9c55091cfb2aeed
SHA1 cc6b77f45f1042d8d5d42d080a72710377d3315e
SHA512 a18607e96151d49c388567585bcab3b3647cb164c637237efc595119f0c8de45fef406ee57ce8befa36a2c9b2a5469b08a8f3b179209063ac89390e0839f3489
SSDEEP 3072:n+XXZ/bnuRojyL7+sXHJD5RRErQ0NeAxt+Jd878pgo9OjXtKvPfH/oHulMftq/4E:GXRn2/LDXHJDweAxt3Iao9IEXwOu1ql
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 372KB

file.exe

IMPHASH aac454bd9c27c59510a0bbc09fbd7552
SHA256 365fe788aa3f4589a3cf5a5ffddf37d93baf301b2d953c804ad03164d21d41dd
MD5 251096a423566f68e9c55091cfb2aeed
SHA1 cc6b77f45f1042d8d5d42d080a72710377d3315e
SHA512 a18607e96151d49c388567585bcab3b3647cb164c637237efc595119f0c8de45fef406ee57ce8befa36a2c9b2a5469b08a8f3b179209063ac89390e0839f3489
SSDEEP 3072:n+XXZ/bnuRojyL7+sXHJD5RRErQ0NeAxt+Jd878pgo9OjXtKvPfH/oHulMftq/4E:GXRn2/LDXHJDweAxt3Iao9IEXwOu1ql
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26882

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA UnhandledExceptionFilter LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection CloseHandle RaiseException WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

shell32

CommandLineToArgvW

Sharing