file[.]exe | Triage™

General

Target
file.exe
Size 354KB
Sample221122-jlyxfsed78
SHA256 30b39abec09a0975936b022b05e4a8b6e2fe34cb52c533a1fdfb2f9832152b74
MD5 b271a60290bfa0d0c6c2be665584956e
SHA1 9ba7f474c0a3be0565c5c291c8d9121ae5e57557
SHA512 2d2bd61463490bd681b2302dc59d0962c4fce2eb302e9bf8c594c36b03d7ee209423dc7471674047cef190788447b7ac0dc5bdca20be605b985c1c69051e53b9
SSDEEP 6144:hglOGQOZIYMdVeC4iY3euVssMDmshnkf8+CwbG:l7pdcCfXuV16zc8wG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 354KB

file.exe

IMPHASH 615e8c141f6e759edad626c5b6c2cfda
SHA256 30b39abec09a0975936b022b05e4a8b6e2fe34cb52c533a1fdfb2f9832152b74
MD5 b271a60290bfa0d0c6c2be665584956e
SHA1 9ba7f474c0a3be0565c5c291c8d9121ae5e57557
SHA512 2d2bd61463490bd681b2302dc59d0962c4fce2eb302e9bf8c594c36b03d7ee209423dc7471674047cef190788447b7ac0dc5bdca20be605b985c1c69051e53b9
SSDEEP 6144:hglOGQOZIYMdVeC4iY3euVssMDmshnkf8+CwbG:l7pdcCfXuV16zc8wG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24464

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW OpenJobObjectW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing