file[.]exe | Triage™

General

Target
file.exe
Size 344KB
Sample221122-n4kvrsca66
SHA256 3ffe45a44618893d1d654d8d557cdfb4fbf3e903060541e3f6447f4c2f5984f1
MD5 afa06c7117518f62625b37e9c75aa130
SHA1 77473b7e1ca21586df740f358681713772111ad1
SHA512 4fd67a184fac7536d7029e76d04aa0c853f1e8e731f44092645e7b20bc0484c79b06dd52d4d4262c13e1034da7671191490a0f32938dbd9eade787e98f325e1e
SSDEEP 6144:36TvX1YoQq8sX1rYOwFzG/mbNC0YFTURNkvsHMUDn22tThsIeGjY6x:WXONq8slkOMG/E5WofVj22ZVEM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 344KB

file.exe

IMPHASH 10a8603fdb3fdbd6953cf884edf79247
SHA256 3ffe45a44618893d1d654d8d557cdfb4fbf3e903060541e3f6447f4c2f5984f1
MD5 afa06c7117518f62625b37e9c75aa130
SHA1 77473b7e1ca21586df740f358681713772111ad1
SHA512 4fd67a184fac7536d7029e76d04aa0c853f1e8e731f44092645e7b20bc0484c79b06dd52d4d4262c13e1034da7671191490a0f32938dbd9eade787e98f325e1e
SSDEEP 6144:36TvX1YoQq8sX1rYOwFzG/mbNC0YFTURNkvsHMUDn22tThsIeGjY6x:WXONq8slkOMG/E5WofVj22ZVEM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA GetComputerNameA FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing