file[.]exe | Triage™

General

Target
file.exe
Size 336KB
Sample221119-17cpsadd54
SHA256 b6f726035c880a4c3e2e7148413cfb8aa7bb71f3e4bf2b22c6cbbdc68452f521
MD5 88046aa632d5cc971924476ab085d72f
SHA1 3197ac4bb5c5b930f75e990644de5cee14c5594b
SHA512 cb0595ff785533fa71f6e78b024a48157df382f8cea2325b345a9f54a4dc11e724d6172be29120c156d24c2f8f319a9524947a94a8ed782123b3f4560d2dbb51
SSDEEP 6144:K9jqOLJtL1uA0aiL6FknrCIwr79CZhVV4E+O13oXc:K9jrJ91iL6FkB0DO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 336KB

file.exe

IMPHASH c8c0db015ca53b9ef621505ac544aadd
SHA256 b6f726035c880a4c3e2e7148413cfb8aa7bb71f3e4bf2b22c6cbbdc68452f521
MD5 88046aa632d5cc971924476ab085d72f
SHA1 3197ac4bb5c5b930f75e990644de5cee14c5594b
SHA512 cb0595ff785533fa71f6e78b024a48157df382f8cea2325b345a9f54a4dc11e724d6172be29120c156d24c2f8f319a9524947a94a8ed782123b3f4560d2dbb51
SSDEEP 6144:K9jqOLJtL1uA0aiL6FknrCIwr79CZhVV4E+O13oXc:K9jrJ91iL6FkB0DO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetComputerNameA SetProcessAffinityMask WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW GetVolumePathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc RemoveDirectoryA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA CreateMutexA FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA LCMapStringW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleCP GetConsoleMode HeapReAlloc SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleOutputCP CloseHandle CreateFileA

Sharing