file[.]exe | Triage™

General

Target
file.exe
Size 364KB
Sample221116-twcr3sga3t
SHA256 39e4e3cf526808ba99d2b7228550e7520d04f758d3d6e0bb01100cf1546f74ce
MD5 005be31a15cf7d717bdf58245ca28eb6
SHA1 525997438de138ec3e9c1e1dc5a703adb6a9f6bd
SHA512 a14fce325043e70b9e0dea39fd0d99551f3b5e612cf39860b5c124649cb25872c318e4886b92972cf549c01235974343941dfec34ac87e1f17aa6daa77dc23e0
SSDEEP 6144:ukp+LNxlTw9BOKmqsN8gqdhkdye1r1Yjje58pHruXBRjzdj:uk4JPTw9oqsKgqyP0j9H+ft
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 364KB

file.exe

IMPHASH 9d3c46448655d82ee7e7b980d48b2aab
SHA256 39e4e3cf526808ba99d2b7228550e7520d04f758d3d6e0bb01100cf1546f74ce
MD5 005be31a15cf7d717bdf58245ca28eb6
SHA1 525997438de138ec3e9c1e1dc5a703adb6a9f6bd
SHA512 a14fce325043e70b9e0dea39fd0d99551f3b5e612cf39860b5c124649cb25872c318e4886b92972cf549c01235974343941dfec34ac87e1f17aa6daa77dc23e0
SSDEEP 6144:ukp+LNxlTw9BOKmqsN8gqdhkdye1r1Yjje58pHruXBRjzdj:uk4JPTw9oqsKgqyP0j9H+ft
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27626

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW GetConsoleAliasesW SetProcessAffinityMask GetProcAddress VirtualAlloc CopyFileA LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetLastError GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing