file[.]exe | Triage™

General

Target
file.exe
Size 232KB
Sample221115-cgp1esee39
SHA256 2506be195ab4624c852d0b39966ee2a679efbdb4211d9679fefe40b751c05bfe
MD5 e5534b800e0217d796bd9d7bfffc525b
SHA1 3ac4e4baccd069cddb9ee03f340e1257a6081b94
SHA512 5ec98345f4366896722f8da8005058a79a03b0020b5cff458969f785b17139dc3593a7ef9e363c86fff5f70e78d7dec05a936b624c6f9b0cac107fed0884ac2d
SSDEEP 3072:SXORRU8LfU8MBB1/VYkt60vU9f+aberOtnbsICdTIyFSt+zSgqMU4jMVYVsh:Ssq8Lf8BB3J0087KrEbsnnfAYa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 232KB

file.exe

IMPHASH 40a4dcf55096fd2511a4f1eb7d8ccdb1
SHA256 2506be195ab4624c852d0b39966ee2a679efbdb4211d9679fefe40b751c05bfe
MD5 e5534b800e0217d796bd9d7bfffc525b
SHA1 3ac4e4baccd069cddb9ee03f340e1257a6081b94
SHA512 5ec98345f4366896722f8da8005058a79a03b0020b5cff458969f785b17139dc3593a7ef9e363c86fff5f70e78d7dec05a936b624c6f9b0cac107fed0884ac2d
SSDEEP 3072:SXORRU8LfU8MBB1/VYkt60vU9f+aberOtnbsICdTIyFSt+zSgqMU4jMVYVsh:Ssq8Lf8BB3J0087KrEbsnnfAYa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26783

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW LCMapStringA SetProcessAffinityMask GetProfileIntA GetLastError GetProcAddress VirtualAlloc CopyFileA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID RaiseException Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

user32

ClientToScreen

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts

Sharing