file[.]exe | Triage™

General

Target
file.exe
Size 374KB
Sample221119-k8ggcsde59
SHA256 9441c40f3c83146b6e640eebbc2192aea36d248702593f6bc6e35b397a42ea53
MD5 385cf6112b404a4cb8312039375129f0
SHA1 05e33cd9fb07579e60e856d65bd276768d86db63
SHA512 687e4276c3b4046c112b6299c84af9047840f173ec54b07c718f75880023352b8eff4ee17486e153cafcb2d52318300a705009aec7b4db0996f840147124ef67
SSDEEP 6144:Msl951YcmjZrwa1Rc5IcBGLCJ0/hkjpPnFwCLLObfwB:/5nmFwaHqGLCJKCxqC3O
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 374KB

file.exe

IMPHASH 938ae2aaaa8ec1fc2d05063ef7a2e3c5
SHA256 9441c40f3c83146b6e640eebbc2192aea36d248702593f6bc6e35b397a42ea53
MD5 385cf6112b404a4cb8312039375129f0
SHA1 05e33cd9fb07579e60e856d65bd276768d86db63
SHA512 687e4276c3b4046c112b6299c84af9047840f173ec54b07c718f75880023352b8eff4ee17486e153cafcb2d52318300a705009aec7b4db0996f840147124ef67
SSDEEP 6144:Msl951YcmjZrwa1Rc5IcBGLCJ0/hkjpPnFwCLLObfwB:/5nmFwaHqGLCJKCxqC3O
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18597

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetProcessAffinityMask WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA GetPrivateProfileIntW FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA CreateMutexA FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW LCMapStringW GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount HeapReAlloc CloseHandle CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

Sharing