file[.]exe | Triage™

General

Target
file.exe
Size 354KB
Sample221122-lpcvhace2v
SHA256 f39c71fba78979972ea62bf344ee11876fe403316706ee307c02bb7b3f69db11
MD5 826fe08606a014b9180997597c33e1c9
SHA1 310c5342d2576568d58d25595d164b8d705ddc5c
SHA512 a4079ce7b3f7cf3bcf491c8e9bbf6b39b7730a6e9bd5d3be1137039fcda757e192d0a69814b2d04c1cc69d03395734dff3eb0f85f536d9d61e8f267f0f78d2f3
SSDEEP 6144:PT3iJkNOIujUshb5VvCOZkczPue4nMrNjOEiWD0922tThsIeGjY6YML:2JkwO0bj4wPpdrZOEjDQ22ZVEpML
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 354KB

file.exe

IMPHASH 615e8c141f6e759edad626c5b6c2cfda
SHA256 f39c71fba78979972ea62bf344ee11876fe403316706ee307c02bb7b3f69db11
MD5 826fe08606a014b9180997597c33e1c9
SHA1 310c5342d2576568d58d25595d164b8d705ddc5c
SHA512 a4079ce7b3f7cf3bcf491c8e9bbf6b39b7730a6e9bd5d3be1137039fcda757e192d0a69814b2d04c1cc69d03395734dff3eb0f85f536d9d61e8f267f0f78d2f3
SSDEEP 6144:PT3iJkNOIujUshb5VvCOZkczPue4nMrNjOEiWD0922tThsIeGjY6YML:2JkwO0bj4wPpdrZOEjDQ22ZVEpML
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24368

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW OpenJobObjectW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing