file[.]exe | Triage™

General

Target
file.exe
Size 341KB
Sample221121-a2cjqabe33
SHA256 8b9bcaad4a244df4b93caffa11155241455f1d5c763aacc02e8a008a32acde7b
MD5 62db020c36a103b43032de57ca26ae7b
SHA1 f33c5441f04a0589f542efed2b03b5ec6a7e4748
SHA512 6a132c07a4aa5b9584e05ebc568ad2f1ead3744ce4810ec89f53619a1b84bdb9b97a44d0bafac52d730d2bed7028209cb76b4f93d97a5d26931ab02a3a71d340
SSDEEP 6144:PYzbvEpwL3R8CkebQUKUyMrzWdWk3/sMDmshnkf8+CwbG:AzbvEp2B3keEzHMrydW/6zc8wG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 341KB

file.exe

IMPHASH 45d8216f77748b6d8826de34ecd9c69e
SHA256 8b9bcaad4a244df4b93caffa11155241455f1d5c763aacc02e8a008a32acde7b
MD5 62db020c36a103b43032de57ca26ae7b
SHA1 f33c5441f04a0589f542efed2b03b5ec6a7e4748
SHA512 6a132c07a4aa5b9584e05ebc568ad2f1ead3744ce4810ec89f53619a1b84bdb9b97a44d0bafac52d730d2bed7028209cb76b4f93d97a5d26931ab02a3a71d340
SSDEEP 6144:PYzbvEpwL3R8CkebQUKUyMrzWdWk3/sMDmshnkf8+CwbG:AzbvEp2B3keEzHMrydW/6zc8wG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20952

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing