file[.]exe | Triage™

General

Target
file.exe
Size 352KB
Sample221121-cdtt7sbe97
SHA256 910e34cd505d85467ac7fada64d036665a14b01fffac5d0751842ec308b72c7d
MD5 858012133e023e26202ff353256c6fbc
SHA1 b5fa0038176933803df509ee9151d688c3e31119
SHA512 2ffc9f602285b1e6ed88dffb9911c0c40411f56071f021544c4f4430057d37d0ddb86e81ee199dec147743cac79acb4c58843781909ba68e7f67f7d6cb666d07
SSDEEP 6144:cquCv125EXCYgj3Cc5pe2wGXXnoNRTsMDmshnkf8+CwbG:BDv1gMKtwMoDA6zc8wG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 352KB

file.exe

IMPHASH 6ce5b34235807ee2c359933fa84f18d8
SHA256 910e34cd505d85467ac7fada64d036665a14b01fffac5d0751842ec308b72c7d
MD5 858012133e023e26202ff353256c6fbc
SHA1 b5fa0038176933803df509ee9151d688c3e31119
SHA512 2ffc9f602285b1e6ed88dffb9911c0c40411f56071f021544c4f4430057d37d0ddb86e81ee199dec147743cac79acb4c58843781909ba68e7f67f7d6cb666d07
SSDEEP 6144:cquCv125EXCYgj3Cc5pe2wGXXnoNRTsMDmshnkf8+CwbG:BDv1gMKtwMoDA6zc8wG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24544

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing