file[.]exe | Triage™

General

Target
file.exe
Size 335KB
Sample221118-ygds2sec69
SHA256 53d2ef70ae273acbb090e4ba85aedc23c0a9ff63895c415d93ac1161b0011486
MD5 1d6cd95d881fe9df0de58ee761f84f82
SHA1 9558ceb0dda97765e0818eab1eed2301fafa127b
SHA512 50e0cbcf79a27e6cf6ea26f77d91113bf1fbf94d16e2adb4d747a067f53cfe0669af35b22ed2354a69da288e41e2e795e7f1e26a6bcdcfd77db7bc0c7c3b1b01
SSDEEP 6144:3wYu53LnzdHfr48ht7/GsthdwIk5j8rpPh+3oQ9gOU+fzYBb6:A57nRHEUt7us5fkyrW9gT6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 335KB

file.exe

IMPHASH 5b41182f662a2f2d1a1fc4285073c9d2
SHA256 53d2ef70ae273acbb090e4ba85aedc23c0a9ff63895c415d93ac1161b0011486
MD5 1d6cd95d881fe9df0de58ee761f84f82
SHA1 9558ceb0dda97765e0818eab1eed2301fafa127b
SHA512 50e0cbcf79a27e6cf6ea26f77d91113bf1fbf94d16e2adb4d747a067f53cfe0669af35b22ed2354a69da288e41e2e795e7f1e26a6bcdcfd77db7bc0c7c3b1b01
SSDEEP 6144:3wYu53LnzdHfr48ht7/GsthdwIk5j8rpPh+3oQ9gOU+fzYBb6:A57nRHEUt7us5fkyrW9gT6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19271

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW SetCommState GetPrivateProfileIntA LoadLibraryW CopyFileW GetFileAttributesA WriteConsoleW GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA GetProcessAffinityMask FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapReAlloc GetConsoleCP GetConsoleMode CreateFileA SetStdHandle MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

Sharing