file[.]exe | Triage™

General

Target
file.exe
Size 316KB
Sample221122-gm124aca97
SHA256 064cc2efe235784f4311ed8811f6140c4045ed8dcdd19ed030c9d4eadfc3f53f
MD5 0d008d0cd8bd96060059aeddb20fcb8c
SHA1 231029b97743828ed7dc4aa573935ca86c9d251b
SHA512 0dc899674cef539548a1101cbad021e059eff891d0823fc23def8a43d83cffd0afb4560dae7d48c55804991f9535daa227d0aa422c0e393ff2f6eca4713e1ab1
SSDEEP 6144:MBOnfvNdSABXICbgs1gmwJT/F/AsMDmshnkf8+CwbG:hnN/XPbgs1UF56zc8wG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 316KB

file.exe

IMPHASH 615e8c141f6e759edad626c5b6c2cfda
SHA256 064cc2efe235784f4311ed8811f6140c4045ed8dcdd19ed030c9d4eadfc3f53f
MD5 0d008d0cd8bd96060059aeddb20fcb8c
SHA1 231029b97743828ed7dc4aa573935ca86c9d251b
SHA512 0dc899674cef539548a1101cbad021e059eff891d0823fc23def8a43d83cffd0afb4560dae7d48c55804991f9535daa227d0aa422c0e393ff2f6eca4713e1ab1
SSDEEP 6144:MBOnfvNdSABXICbgs1gmwJT/F/AsMDmshnkf8+CwbG:hnN/XPbgs1UF56zc8wG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24464

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW OpenJobObjectW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing