file[.]exe | Triage™

General

Target
file.exe
Size 373KB
Sample221118-r5vm5shf44
SHA256 074e1f249ae01b95dc566b920138a53682c5bc9253b92bb6e6a564ae407fd79c
MD5 2b14cdb2ac9eb448c9e60b00369a1e9f
SHA1 2e55b581fe2aa8f72ba787f619cceda851f6735e
SHA512 6579f629b80d2f74305ed70879ed17924a1c900e9608d65f566353f4956af6214e60b5b3f9de4b2e598ec6d6f83e9425ae6c0204ffe35f4efc48a4484e09e754
SSDEEP 6144:s8OcpKCTbi25FwZu83C/uzJO7W148zZ+hp0fBa1nugw:Xpni2DwZuvAOVXhp0fQ1jw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 373KB

file.exe

IMPHASH f9ffb0d2e1b091864ff2e1d952a01652
SHA256 074e1f249ae01b95dc566b920138a53682c5bc9253b92bb6e6a564ae407fd79c
MD5 2b14cdb2ac9eb448c9e60b00369a1e9f
SHA1 2e55b581fe2aa8f72ba787f619cceda851f6735e
SHA512 6579f629b80d2f74305ed70879ed17924a1c900e9608d65f566353f4956af6214e60b5b3f9de4b2e598ec6d6f83e9425ae6c0204ffe35f4efc48a4484e09e754
SSDEEP 6144:s8OcpKCTbi25FwZu83C/uzJO7W148zZ+hp0fBa1nugw:Xpni2DwZuvAOVXhp0fQ1jw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19285

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW SetCommState GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA WriteConsoleW GetComputerNameA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA GetProcessAffinityMask FindNextFileW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringA GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapReAlloc GetConsoleCP GetConsoleMode CreateFileA SetStdHandle MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing