file[.]exe | Triage™

General

Target
file.exe
Size 353KB
Sample221114-m7zbwsba26
SHA256 31597828f79a7a8f9ef765b193b723d5d167f161cbbd361f1f2332a0bfbbfd55
MD5 0927fb57b8927896d773b81528851778
SHA1 4807d533f6bd042c9e0f89ec86d518e25f322315
SHA512 7ed3c0e69415eb48b949471671e9fd0b818d9c2b2dfd394ac44ad69c18fa86e4f3dec241bda168c685dc8f0fe54aeb5e347536b448843d1a3a997885d7624710
SSDEEP 6144:GfIFwhLMsB2z+VWnmuQF88aL7glMterwULhDeCvLUsvOOhEn2E1aJ:GfIFKgsBe+QnmO8Arter9yCjU6hUv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 353KB

file.exe

IMPHASH cfe8f0f8cf89132ff3ef163fb7b43662
SHA256 31597828f79a7a8f9ef765b193b723d5d167f161cbbd361f1f2332a0bfbbfd55
MD5 0927fb57b8927896d773b81528851778
SHA1 4807d533f6bd042c9e0f89ec86d518e25f322315
SHA512 7ed3c0e69415eb48b949471671e9fd0b818d9c2b2dfd394ac44ad69c18fa86e4f3dec241bda168c685dc8f0fe54aeb5e347536b448843d1a3a997885d7624710
SSDEEP 6144:GfIFwhLMsB2z+VWnmuQF88aL7glMterwULhDeCvLUsvOOhEn2E1aJ:GfIFKgsBe+QnmO8Arter9yCjU6hUv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA WaitNamedPipeA CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

Sharing