file[.]exe | Triage™

General

Target
file.exe
Size 353KB
Sample221114-hdf61afd26
SHA256 368eecea3d75c90203034be5e9e15bc2999a832d9ca6bd7fc20122a06e5a1e46
MD5 c6a26363658b6cee1f62c810633a57ec
SHA1 e8a4c548270b5faba4aea5a9de9a0d1a4ae90336
SHA512 00b3a43c455722aaf66db77dc786a56383c0a2abc1bc59aca92b9a2a9505066f3b83895f0aeb5d8f2251c9e8eab35aea2cfb6597ccbd8a90ae897c67fc3b01eb
SSDEEP 6144:eqjGBLaXhgoHZK5HN98pUCWG8R75oc7En2E1aJ:eEa2XhNHo5HN984G8l5oc7Uv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 353KB

file.exe

IMPHASH 0ade1885c5e3649b8f796b67a1791986
SHA256 368eecea3d75c90203034be5e9e15bc2999a832d9ca6bd7fc20122a06e5a1e46
MD5 c6a26363658b6cee1f62c810633a57ec
SHA1 e8a4c548270b5faba4aea5a9de9a0d1a4ae90336
SHA512 00b3a43c455722aaf66db77dc786a56383c0a2abc1bc59aca92b9a2a9505066f3b83895f0aeb5d8f2251c9e8eab35aea2cfb6597ccbd8a90ae897c67fc3b01eb
SSDEEP 6144:eqjGBLaXhgoHZK5HN98pUCWG8R75oc7En2E1aJ:eEa2XhNHo5HN984G8l5oc7Uv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26712

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing