file[.]exe | Triage™

General

Target
file.exe
Size 440KB
Sample221114-tgr88acd69
SHA256 3bc3b5c9529e04a34caf65feac6fb1ff043c1f03a8fc64b6365ffc68dfd0ac8a
MD5 2f6aee751e8a956f679a7f78be31e499
SHA1 00d35f74625ab5e8c1463eae5ffb00f94084320e
SHA512 5e1bfd60847aa286f527f77dabadf50253b54dce58794b4d750342988d8e39e66935b776a1ef3e175a73cccdbd162fba301696abf327eda883d93d97f308c2b4
SSDEEP 6144:YaMFLPqcOBuAVq3yF5q89AnqFadhq7X5Eyh4DhTDfojG2uz6KMUYd4En2E1a:YaYGcOB1F5q89Yh2yyh4DOG2uzzg4Uv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 440KB

file.exe

IMPHASH 6d50de5d9e6eedfa2f6d928af4dafee7
SHA256 3bc3b5c9529e04a34caf65feac6fb1ff043c1f03a8fc64b6365ffc68dfd0ac8a
MD5 2f6aee751e8a956f679a7f78be31e499
SHA1 00d35f74625ab5e8c1463eae5ffb00f94084320e
SHA512 5e1bfd60847aa286f527f77dabadf50253b54dce58794b4d750342988d8e39e66935b776a1ef3e175a73cccdbd162fba301696abf327eda883d93d97f308c2b4
SSDEEP 6144:YaMFLPqcOBuAVq3yF5q89AnqFadhq7X5Eyh4DhTDfojG2uz6KMUYd4En2E1a:YaYGcOB1F5q89Yh2yyh4DOG2uzzg4Uv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26383

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID SetProcessAffinityMask GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW lstrlenW LCMapStringA GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress VirtualAlloc SetComputerNameA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW AddConsoleAliasA SetFileAttributesW LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile RaiseException GetConsoleOutputCP WriteConsoleW

Sharing