file[.]exe | Triage™

General

Target
file.exe
Size 372KB
Sample221111-cbjlfsabdm
SHA256 7c8e262bc7ed9ae1c9ecd2ca9469d7a4470218e4e56783a216ece9701fd90ce5
MD5 1a3a0836d8bb573a376f5823d5bb84fc
SHA1 c9431205c6316cea7ae4e3b8daf75c20462d4762
SHA512 43ce9c12aa3597bb4a856e186f2173ca5f359edb9bc642489c35a1bfba1734a203b36e403d68e6efa4677d224122c9b386878e38c09b87d40a610170ea5756d4
SSDEEP 6144:XdE3aPLpNxJD5yxdeRrJmyekZRTbM5qXwOu1ql:XdntNxJOg2oRzUql
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 372KB

file.exe

IMPHASH aac454bd9c27c59510a0bbc09fbd7552
SHA256 7c8e262bc7ed9ae1c9ecd2ca9469d7a4470218e4e56783a216ece9701fd90ce5
MD5 1a3a0836d8bb573a376f5823d5bb84fc
SHA1 c9431205c6316cea7ae4e3b8daf75c20462d4762
SHA512 43ce9c12aa3597bb4a856e186f2173ca5f359edb9bc642489c35a1bfba1734a203b36e403d68e6efa4677d224122c9b386878e38c09b87d40a610170ea5756d4
SSDEEP 6144:XdE3aPLpNxJD5yxdeRrJmyekZRTbM5qXwOu1ql:XdntNxJOg2oRzUql
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26882

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA UnhandledExceptionFilter LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection CloseHandle RaiseException WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

shell32

CommandLineToArgvW

Sharing