file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221122-rhtsbsae2y
SHA256 894a882987a059912caf2f050e78c3cf2a470b7f3c2a4a8a0af9e9c4b66fd080
MD5 9a86d53354c9fdcfd27b23930581db19
SHA1 20bc69c4dc6c6758fe6c32fdc2c9faa74a8ee7c7
SHA512 032c987e219dcbb337733ffa16068b01fba6ba8ddc46886dc9c7f84c13128de06695589e9a1b018aed1240c3d3da45c03620a8486fec6364395d34d8af40aeb3
SSDEEP 6144:dFV2VqWlb2HYjE+Q5AZu7mA22tThsIeGjY6:kkWlbNjqAZxA22ZVE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH f4fedbaa048e50ec2296f519edbed245
SHA256 894a882987a059912caf2f050e78c3cf2a470b7f3c2a4a8a0af9e9c4b66fd080
MD5 9a86d53354c9fdcfd27b23930581db19
SHA1 20bc69c4dc6c6758fe6c32fdc2c9faa74a8ee7c7
SHA512 032c987e219dcbb337733ffa16068b01fba6ba8ddc46886dc9c7f84c13128de06695589e9a1b018aed1240c3d3da45c03620a8486fec6364395d34d8af40aeb3
SSDEEP 6144:dFV2VqWlb2HYjE+Q5AZu7mA22tThsIeGjY6:kkWlbNjqAZxA22ZVE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24160

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA FillConsoleOutputCharacterA GetConsoleAliasesW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW WriteConsoleA GetProcessWorkingSetSize LocalAlloc RemoveDirectoryW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringA GetComputerNameA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing