file[.]exe | Triage™

General

Target
file.exe
Size 366KB
Sample221115-emcndsbb9x
SHA256 54ddc1748ff5e36fb993d4b7da368457be704f84e26a533a3a1c6c3e41ab839e
MD5 d5fd39d814d6d704eeb5079049187426
SHA1 70bc10da2a3dbaae3fc0b67685e789bd54a1904f
SHA512 c5d3741649b840f39461e2efaa9f52acfea1231b318bb8cbc0c9a41f90e2b43b96dfe077b139d3bd4720047653495400bcf4f67a7c1aa950ca97838cb0258a27
SSDEEP 6144:nKJOELB1qA4Kxm3yBjcdBF6l7qGplTgbT2Xx5qkQqXAm:nKJdF1qAtxmucDF6plTaT45qQQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 366KB

file.exe

IMPHASH 40a4dcf55096fd2511a4f1eb7d8ccdb1
SHA256 54ddc1748ff5e36fb993d4b7da368457be704f84e26a533a3a1c6c3e41ab839e
MD5 d5fd39d814d6d704eeb5079049187426
SHA1 70bc10da2a3dbaae3fc0b67685e789bd54a1904f
SHA512 c5d3741649b840f39461e2efaa9f52acfea1231b318bb8cbc0c9a41f90e2b43b96dfe077b139d3bd4720047653495400bcf4f67a7c1aa950ca97838cb0258a27
SSDEEP 6144:nKJOELB1qA4Kxm3yBjcdBF6l7qGplTgbT2Xx5qkQqXAm:nKJdF1qAtxmucDF6plTaT45qQQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26767

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW LCMapStringA SetProcessAffinityMask GetProfileIntA GetLastError GetProcAddress VirtualAlloc CopyFileA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID RaiseException Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

user32

ClientToScreen

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts

Sharing