file[.]exe | Triage™

General

Target
file.exe
Size 351KB
Sample221121-dwwxysbf72
SHA256 fbcd823b376cfb88ab9f8a9740b82a5dbe6c694386c8a66484e4110c82b2b527
MD5 1d928af58e1dd5dced78cc48633c95eb
SHA1 a24642bca2b3f167b09aeb84edaf3a1f3a2031ab
SHA512 495493642a4da6b095d4618a3a96a109f8edddb9e00abee752537d89947e89cdd96cb1696de306f09c4036f427164e58696a700888d9af8b8c57baf5670d9468
SSDEEP 6144:aomxi1fOSn1FbR0isrfX1/cCcok8sMDmshnkf8+CwbG:BIi1f7TSpB/hcokF6zc8wG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 351KB

file.exe

IMPHASH 6ce5b34235807ee2c359933fa84f18d8
SHA256 fbcd823b376cfb88ab9f8a9740b82a5dbe6c694386c8a66484e4110c82b2b527
MD5 1d928af58e1dd5dced78cc48633c95eb
SHA1 a24642bca2b3f167b09aeb84edaf3a1f3a2031ab
SHA512 495493642a4da6b095d4618a3a96a109f8edddb9e00abee752537d89947e89cdd96cb1696de306f09c4036f427164e58696a700888d9af8b8c57baf5670d9468
SSDEEP 6144:aomxi1fOSn1FbR0isrfX1/cCcok8sMDmshnkf8+CwbG:BIi1f7TSpB/hcokF6zc8wG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24544

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing