file[.]exe | Triage™

General

Target
file.exe
Size 308KB
Sample221114-te21mscd53
SHA256 187175dfd56dafcab9056ffe9e0c2f6a2d8432231a7d094356ed118b6bc0a245
MD5 eb18057e57f4b111f03f1e39e100fdd6
SHA1 05553b379cef958f34536b077792a50be65aa3f6
SHA512 cd88512f896e2a01bd92a2cc47f865ca9b632967b02a5bca355702a2d80996a748d0a2fce38b5b38450b4a6ae89312ef5e7145a7308bbc912724b54f293a230f
SSDEEP 3072:ZXOqvnX4b5LNn3+Oxg0ea1i9sOOQKA8t5u3F7sZ8HGKI3szykEhCoG7ViUWg+3ZG:97vIlLt+OxuasKA4DZCekEn2E1a
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 308KB

file.exe

IMPHASH 6d50de5d9e6eedfa2f6d928af4dafee7
SHA256 187175dfd56dafcab9056ffe9e0c2f6a2d8432231a7d094356ed118b6bc0a245
MD5 eb18057e57f4b111f03f1e39e100fdd6
SHA1 05553b379cef958f34536b077792a50be65aa3f6
SHA512 cd88512f896e2a01bd92a2cc47f865ca9b632967b02a5bca355702a2d80996a748d0a2fce38b5b38450b4a6ae89312ef5e7145a7308bbc912724b54f293a230f
SSDEEP 3072:ZXOqvnX4b5LNn3+Oxg0ea1i9sOOQKA8t5u3F7sZ8HGKI3szykEhCoG7ViUWg+3ZG:97vIlLt+OxuasKA4DZCekEn2E1a
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26383

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW lstrlenW LCMapStringA GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress VirtualAlloc SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA SetFileAttributesW LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile RaiseException GetConsoleOutputCP WriteConsoleW

Sharing