file[.]exe | Triage™

General

Target
file.exe
Size 306KB
Sample221122-mlh3saab98
SHA256 3e7d8ff314e7b2a51418d386ac0e32ba4e0bea117a2d906ca46ca4a743c20302
MD5 de714ef32b5a7983396a0b04d6d1b996
SHA1 d3edd6a058dbb28da100b7ad3218fdae573faa0d
SHA512 13297402ebc9103cb709f7bd93d0e1305f13e838362e6c692246a017cbcfac34f68e120c6c44c730430e7c7fee1d7f822107671f58aaac119b45a35a6b66b5e5
SSDEEP 6144:J1PgDYsLLKyYwfRjOjF22tThsIeGjY6x:oDhvKyrfRjGF22ZVEM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 306KB

file.exe

IMPHASH 10a8603fdb3fdbd6953cf884edf79247
SHA256 3e7d8ff314e7b2a51418d386ac0e32ba4e0bea117a2d906ca46ca4a743c20302
MD5 de714ef32b5a7983396a0b04d6d1b996
SHA1 d3edd6a058dbb28da100b7ad3218fdae573faa0d
SHA512 13297402ebc9103cb709f7bd93d0e1305f13e838362e6c692246a017cbcfac34f68e120c6c44c730430e7c7fee1d7f822107671f58aaac119b45a35a6b66b5e5
SSDEEP 6144:J1PgDYsLLKyYwfRjOjF22tThsIeGjY6x:oDhvKyrfRjGF22ZVEM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA GetComputerNameA FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing