file[.]exe | Triage™

General

Target
file.exe
Size 313KB
Sample221121-ej3emsfd9x
SHA256 2cfabc0bd120f9dd332ac07234e1f4fcd5ddfa60d55d84efbdd70a43dce21e88
MD5 3ad2c5901930fc17f47147e9db4766f3
SHA1 aeb68a30d7995120132c51cc33e681780805452b
SHA512 a990f9d23f635074cd4f29cb292fb4ce3e95a6e935a8f0779cfe538371a3218dbe25513fc12b9e08aff3140edd78992b74243441c26cb2417fe6ad240bda32ba
SSDEEP 6144:1JFGA1xwsWiV9GLaTDjjEkUwq+esMDmshnkf8+CwbG:rYA1xwTiflH8uT6zc8wG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 313KB

file.exe

IMPHASH 6ce5b34235807ee2c359933fa84f18d8
SHA256 2cfabc0bd120f9dd332ac07234e1f4fcd5ddfa60d55d84efbdd70a43dce21e88
MD5 3ad2c5901930fc17f47147e9db4766f3
SHA1 aeb68a30d7995120132c51cc33e681780805452b
SHA512 a990f9d23f635074cd4f29cb292fb4ce3e95a6e935a8f0779cfe538371a3218dbe25513fc12b9e08aff3140edd78992b74243441c26cb2417fe6ad240bda32ba
SSDEEP 6144:1JFGA1xwsWiV9GLaTDjjEkUwq+esMDmshnkf8+CwbG:rYA1xwTiflH8uT6zc8wG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24544

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing