file[.]exe | Triage™

General

Target
file.exe
Size 336KB
Sample221119-ltb4rsae7t
SHA256 c3ac86b3dfaed540a466f230e12c3f12c56e10755b6d5d195001ca5523d80fa4
MD5 0b4a255ca42d116a305c26265a5f605f
SHA1 198def6bbfc773cb3398fdb7e9c7c0fb55ed7012
SHA512 681dffca8806fcdb595f385a48351ee745e3381ae90aee1afe7e928198c5db2c1ae36262add760d5b9589e5bfe0c1b02e60f6e3f6cf7921024f0b907196853c8
SSDEEP 6144:IIWDlpDVjenY0GaoOxHxlohXjpPnFwCLLObfwB:CDrDcY1OxROFxqC3O
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 336KB

file.exe

IMPHASH 045163335c785d665aeb43938f4d94be
SHA256 c3ac86b3dfaed540a466f230e12c3f12c56e10755b6d5d195001ca5523d80fa4
MD5 0b4a255ca42d116a305c26265a5f605f
SHA1 198def6bbfc773cb3398fdb7e9c7c0fb55ed7012
SHA512 681dffca8806fcdb595f385a48351ee745e3381ae90aee1afe7e928198c5db2c1ae36262add760d5b9589e5bfe0c1b02e60f6e3f6cf7921024f0b907196853c8
SSDEEP 6144:IIWDlpDVjenY0GaoOxHxlohXjpPnFwCLLObfwB:CDrDcY1OxROFxqC3O
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18603

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetProcessAffinityMask WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA GetPrivateProfileIntW FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA CreateMutexA FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW LCMapStringW GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount HeapReAlloc CloseHandle CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

Sharing