file[.]exe | Triage™

General

Target
file.exe
Size 316KB
Sample221122-ll2pfscd21
SHA256 9c0e0ae8eefcaf100e64e3e27c5f3fa88298ddccdf0a4e8437d8ad3f322e40b7
MD5 f0f277a1e9a333c5dbc610e63f79c8bb
SHA1 ef08439fc7e94a808075609efda071d3175ae5c4
SHA512 a65784f368cb66a996f188ca73afea93d12541b3b022539f85dce3a20f7b965f6c54d6efb868030733e6681625380d0bb59706cadd66bad98bf0b39715a68b98
SSDEEP 6144:h2fgEwtwFIrqkbU2rCfcA4IpKjRY22tThsIeGjY6YML:ZtoGbU9UA4IpKtY22ZVEpML
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 316KB

file.exe

IMPHASH 615e8c141f6e759edad626c5b6c2cfda
SHA256 9c0e0ae8eefcaf100e64e3e27c5f3fa88298ddccdf0a4e8437d8ad3f322e40b7
MD5 f0f277a1e9a333c5dbc610e63f79c8bb
SHA1 ef08439fc7e94a808075609efda071d3175ae5c4
SHA512 a65784f368cb66a996f188ca73afea93d12541b3b022539f85dce3a20f7b965f6c54d6efb868030733e6681625380d0bb59706cadd66bad98bf0b39715a68b98
SSDEEP 6144:h2fgEwtwFIrqkbU2rCfcA4IpKjRY22tThsIeGjY6YML:ZtoGbU9UA4IpKtY22ZVEpML
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24368

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW OpenJobObjectW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing