file[.]exe | Triage™

General

Target
file.exe
Size 315KB
Sample221114-k96smsbb5x
SHA256 4e95d3db7c7af21e4578abae6defcf9982387452d72d36fa667f782f7d20e6fc
MD5 1135980200448273e2934f35ba926b4e
SHA1 902fc2493f2d7894244cf3ab650b8b3541dd90cc
SHA512 477a2ab9bfcb207651a44333ee2daeb16ac3def02f4085d3df23b3c92e7878370c8c558d940317480cacabeb9c33384b5814bd3d3f4dcdb19ea640abe32819da
SSDEEP 3072:zAXbEVrYyL0sbQiVY5Z/Go44IKu50dDYpJeT/5kg1FROChvMq2PhAIEhCoG7ViUn:QarYyLFQigZ/bVbse11FROC0En2E1aJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 315KB

file.exe

IMPHASH 0ade1885c5e3649b8f796b67a1791986
SHA256 4e95d3db7c7af21e4578abae6defcf9982387452d72d36fa667f782f7d20e6fc
MD5 1135980200448273e2934f35ba926b4e
SHA1 902fc2493f2d7894244cf3ab650b8b3541dd90cc
SHA512 477a2ab9bfcb207651a44333ee2daeb16ac3def02f4085d3df23b3c92e7878370c8c558d940317480cacabeb9c33384b5814bd3d3f4dcdb19ea640abe32819da
SSDEEP 3072:zAXbEVrYyL0sbQiVY5Z/Go44IKu50dDYpJeT/5kg1FROChvMq2PhAIEhCoG7ViUn:QarYyLFQigZ/bVbse11FROC0En2E1aJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26712

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing