file[.]exe | Triage™

General

Target
file.exe
Size 346KB
Sample221114-rey8msgd31
SHA256 e990efb6de3adbdf1650a5d37b9db9a189db01eb7f3cc3d77d34f371a17e5ea6
MD5 28aa6d0369bda45448f6c2cc03733bf4
SHA1 da75c44c83ee75a1197f095c896d38b75ce7cf6b
SHA512 b3fc3344f6aa853d1fc21312507499525da99fbab2a27fedca7b1252c5599501e15e4d4689afb8e335c3680701434312dd1338fe4981ae7f880f1e9f263ccb75
SSDEEP 6144:ypbjlLTzOxlINYznGoeGf0M34pZTVPG+dEn2E1a:ypFPzOxiNYznGk0M323xUv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 346KB

file.exe

IMPHASH 3ede86ea15bd6a919edb55c89cba6a2d
SHA256 e990efb6de3adbdf1650a5d37b9db9a189db01eb7f3cc3d77d34f371a17e5ea6
MD5 28aa6d0369bda45448f6c2cc03733bf4
SHA1 da75c44c83ee75a1197f095c896d38b75ce7cf6b
SHA512 b3fc3344f6aa853d1fc21312507499525da99fbab2a27fedca7b1252c5599501e15e4d4689afb8e335c3680701434312dd1338fe4981ae7f880f1e9f263ccb75
SSDEEP 6144:ypbjlLTzOxlINYznGoeGf0M34pZTVPG+dEn2E1a:ypFPzOxiNYznGk0M323xUv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26383

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW lstrlenW LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA GetTempPathA WriteProcessMemory LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile RaiseException GetConsoleOutputCP WriteConsoleW

Sharing