file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221122-smbb8agd76
SHA256 219f4e3466a511ea74c187367a576db6d388d74674461f3fadefb32c6eef2378
MD5 4f15261189f8276060a4afc1556d65ab
SHA1 1e61795802aa916b0437bede28401838069fe056
SHA512 7f7db05fa5514e98ef4119ea664643b6fbc9b7b02fcb15e278ff98f92029c504555c4663327cb1caa88db03e6618177cb84eb0bf6925fda53a69a3a00264e39b
SSDEEP 6144:Q7af58rJowDVBZDehzfOUK22tThsIeGjY6:rmrJo6VBZ8K22ZVE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH f4fedbaa048e50ec2296f519edbed245
SHA256 219f4e3466a511ea74c187367a576db6d388d74674461f3fadefb32c6eef2378
MD5 4f15261189f8276060a4afc1556d65ab
SHA1 1e61795802aa916b0437bede28401838069fe056
SHA512 7f7db05fa5514e98ef4119ea664643b6fbc9b7b02fcb15e278ff98f92029c504555c4663327cb1caa88db03e6618177cb84eb0bf6925fda53a69a3a00264e39b
SSDEEP 6144:Q7af58rJowDVBZDehzfOUK22tThsIeGjY6:rmrJo6VBZ8K22ZVE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24160

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA FillConsoleOutputCharacterA GetConsoleAliasesW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW WriteConsoleA GetProcessWorkingSetSize LocalAlloc RemoveDirectoryW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringA GetComputerNameA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing