file[.]exe | Triage™

General

Target
file.exe
Size 316KB
Sample221114-hm3flafd59
SHA256 0e958f6b88c101538f229c36ca543d2df57f695ec1401fc28fc0e16a5ffdaed0
MD5 9b3f8e98035a67d8df1e5176d154d91e
SHA1 cc7e3932ace51994a7e741efc7688f51078f1d15
SHA512 61f7480398fba7ae72b767ed93211043ba5a06fae06424315b4665b249c9910353b96adcd13e0093ea52eacfce0ae1369d97713da44069993cc8c95257b28c34
SSDEEP 6144:DXNGDLZPaNghsRqNUkPw0RONxhv1/sKpEn2E1aJ:D9gVPaNQxyuJsTNpUv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 316KB

file.exe

IMPHASH 0ade1885c5e3649b8f796b67a1791986
SHA256 0e958f6b88c101538f229c36ca543d2df57f695ec1401fc28fc0e16a5ffdaed0
MD5 9b3f8e98035a67d8df1e5176d154d91e
SHA1 cc7e3932ace51994a7e741efc7688f51078f1d15
SHA512 61f7480398fba7ae72b767ed93211043ba5a06fae06424315b4665b249c9910353b96adcd13e0093ea52eacfce0ae1369d97713da44069993cc8c95257b28c34
SSDEEP 6144:DXNGDLZPaNghsRqNUkPw0RONxhv1/sKpEn2E1aJ:D9gVPaNQxyuJsTNpUv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26712

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing