file[.]exe | Triage™

General

Target
file.exe
Size 295KB
Sample221114-w112kshb9x
SHA256 dbc149e2028199dea4d4182f87efe2cd0e489cc562c9ab69ef5bd8be663aa5f3
MD5 43a6de0415cd87bec0ccae0c9e9915ce
SHA1 0a6875881d00720f6ca240bf154da53303854ce9
SHA512 c881b9346650fedc6c929467e6674f793cc45c58f41966cbc0bf9a87f236ef4a5ace22807490b8de73ff1142b794f0133008818b1e049fc9cf329b25f4fc9a8b
SSDEEP 6144:XYy+LC3OLKrq1u/Qs5xhllBeXsriEndTQ:XYN+3OLl1u/ZF4XrUdT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 295KB

file.exe

IMPHASH 20d0a6050daabe2704c95b6dd23a806a
SHA256 dbc149e2028199dea4d4182f87efe2cd0e489cc562c9ab69ef5bd8be663aa5f3
MD5 43a6de0415cd87bec0ccae0c9e9915ce
SHA1 0a6875881d00720f6ca240bf154da53303854ce9
SHA512 c881b9346650fedc6c929467e6674f793cc45c58f41966cbc0bf9a87f236ef4a5ace22807490b8de73ff1142b794f0133008818b1e049fc9cf329b25f4fc9a8b
SSDEEP 6144:XYy+LC3OLKrq1u/Qs5xhllBeXsriEndTQ:XYN+3OLl1u/ZF4XrUdT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26399

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID SetProcessAffinityMask CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW LCMapStringA GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte CreateFileA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile RaiseException GetConsoleOutputCP

Sharing