file[.]exe | Triage™

General

Target
file.exe
Size 374KB
Sample221120-e3netsba5v
SHA256 f47fca256324d1de3c73b4c7844edcde1f23fc7e4c7b839aa588a4c409ac25d7
MD5 030a20297bd8aaea7fb60e5cb16a86e0
SHA1 52df2bc7e3f445be2aa75f14d199c2ede8541569
SHA512 472b2e974f31c642e5f7a2aaac6ac8c831eb0338e1b95ab1c4678160aed9e8777c4ce4b13d31b98c22a85b98699c8ff03daa754e4ebb85812f22e501f9cc3fe4
SSDEEP 6144:uv5cm6Nyows0B3VoKJwHig/CZhVV4E+O13oXc:KcNJkB3Voh/60DO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 374KB

file.exe

IMPHASH 9fabaf303efb2031ad569e397ab31c33
SHA256 f47fca256324d1de3c73b4c7844edcde1f23fc7e4c7b839aa588a4c409ac25d7
MD5 030a20297bd8aaea7fb60e5cb16a86e0
SHA1 52df2bc7e3f445be2aa75f14d199c2ede8541569
SHA512 472b2e974f31c642e5f7a2aaac6ac8c831eb0338e1b95ab1c4678160aed9e8777c4ce4b13d31b98c22a85b98699c8ff03daa754e4ebb85812f22e501f9cc3fe4
SSDEEP 6144:uv5cm6Nyows0B3VoKJwHig/CZhVV4E+O13oXc:KcNJkB3Voh/60DO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21230

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetComputerNameA SetProcessAffinityMask WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW GetVolumePathNameA FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA CreateMutexA FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA LCMapStringW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleCP GetConsoleMode HeapReAlloc SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleOutputCP CloseHandle CreateFileA

Sharing