file[.]exe | Triage™

General

Target
file.exe
Size 279KB
Sample221117-ebmn8adf26
SHA256 6e86f56ba19e6646ff2cc0e8b24d0da9c8b8d5f41fdc8e442b906116f1916b8f
MD5 37627765d238f7ab776a24023276786e
SHA1 0fcc64c83e319634d3475ed65e8c654e2d5da1b7
SHA512 30fb09fc4f4bffe1ddd1b14d00ccb6323fc3126c03c6bef8ec70d49fa7e1eacf9589798642fc8a3accacc96d0f08be887c6ee66a972ab78b0361cf570cd5686b
SSDEEP 6144:TA+LHum8l4UIomMovS9QpPJ5gbYsIf9OAxGb:TBr58l4lnp3gsX5A
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 279KB

file.exe

IMPHASH 3635066ced5785b53b09a5114f4a742f
SHA256 6e86f56ba19e6646ff2cc0e8b24d0da9c8b8d5f41fdc8e442b906116f1916b8f
MD5 37627765d238f7ab776a24023276786e
SHA1 0fcc64c83e319634d3475ed65e8c654e2d5da1b7
SHA512 30fb09fc4f4bffe1ddd1b14d00ccb6323fc3126c03c6bef8ec70d49fa7e1eacf9589798642fc8a3accacc96d0f08be887c6ee66a972ab78b0361cf570cd5686b
SSDEEP 6144:TA+LHum8l4UIomMovS9QpPJ5gbYsIf9OAxGb:TBr58l4lnp3gsX5A
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27770

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetPrivateProfileIntA SetFileShortNameW LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA EnumSystemCodePagesW LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA GetProcessAffinityMask FindNextFileW GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringW GetLastError GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing