file[.]exe | Triage™

General

Target
file.exe
Size 314KB
Sample221121-chvx3abf25
SHA256 535e926d89b710bbabd01d4d2e6179c95f7097486eadc6dcea41a1fd85e1cb25
MD5 749d67af0ca942c91ccb0eb8e4cd3704
SHA1 78a65750cd10002e29e524442992f9ec0dc6ee32
SHA512 4688a8d0b3b87e0ecc26094c8ce094220585209d9a97f66c576c60a79c66e880d746457ce1622d2839524ca4ad5e20fb3c91a892eafcfe184d1d36559c552eb5
SSDEEP 6144:cf7Bhl16MnvBa1vPQ/+LL+a7sMDmshnkf8+CwbG:C7zl16cKPNG36zc8wG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 314KB

file.exe

IMPHASH 6ce5b34235807ee2c359933fa84f18d8
SHA256 535e926d89b710bbabd01d4d2e6179c95f7097486eadc6dcea41a1fd85e1cb25
MD5 749d67af0ca942c91ccb0eb8e4cd3704
SHA1 78a65750cd10002e29e524442992f9ec0dc6ee32
SHA512 4688a8d0b3b87e0ecc26094c8ce094220585209d9a97f66c576c60a79c66e880d746457ce1622d2839524ca4ad5e20fb3c91a892eafcfe184d1d36559c552eb5
SSDEEP 6144:cf7Bhl16MnvBa1vPQ/+LL+a7sMDmshnkf8+CwbG:C7zl16cKPNG36zc8wG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24544

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing