file[.]exe | Triage™

General

Target
file.exe
Size 447KB
Sample221114-m19jaaca4z
SHA256 9d84a9c8c5e9f9b983cece0f36b4e6adb72f573bbf7a683c5c6ec5eca3841447
MD5 fd0c71870385e350cd46e0796f0bf001
SHA1 0a4aa2c27fa319a1fb11a91cac3630f3bb600896
SHA512 7fe97a7190391c6d8a5734443db422285cb3a7373be9068a28bf082370cec86f81dff12c520a21131f2311611e1b8515a57fc9381cc171e1523f3572b6b5bfdc
SSDEEP 6144:pDJYcrLcxdTgIq+LxQ0ZxEoQunVnFv0VSOERL94cgYwWQnSMkkgX77eEn2E1aJ:p1YaYxdTFq0KqEDMvs7c08PeUv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 447KB

file.exe

IMPHASH 0ade1885c5e3649b8f796b67a1791986
SHA256 9d84a9c8c5e9f9b983cece0f36b4e6adb72f573bbf7a683c5c6ec5eca3841447
MD5 fd0c71870385e350cd46e0796f0bf001
SHA1 0a4aa2c27fa319a1fb11a91cac3630f3bb600896
SHA512 7fe97a7190391c6d8a5734443db422285cb3a7373be9068a28bf082370cec86f81dff12c520a21131f2311611e1b8515a57fc9381cc171e1523f3572b6b5bfdc
SSDEEP 6144:pDJYcrLcxdTgIq+LxQ0ZxEoQunVnFv0VSOERL94cgYwWQnSMkkgX77eEn2E1aJ:p1YaYxdTFq0KqEDMvs7c08PeUv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26712

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA WaitNamedPipeA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing