file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221122-v793dsbf29
SHA256 568b89691ba7dcaec088117743207b04ae82aa9de4888e74397a4c59b76180fa
MD5 770436939a15eea2fa02b94a00fabdeb
SHA1 85061e340ba56dbb8e0f918cb6382ea29ea42620
SHA512 c27a90a05af7cadf1fc2ec5849fde811575b2650a325618b7049696f04d115ba867481b350c65e35560caad9eebb682a8aa3d91b5c26ac2918200b0069accef2
SSDEEP 3072:wOwKRo2tTTgi/joh5TvgXHL/JZlrAKIX3wVyt4zczP22tThsNbNweGj+Qo6hNz5M:YQlb/OgXrjlrs4zczP22tThsIeGjY6u
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH dffb07272d047284b6f8af1647e44f7c
SHA256 568b89691ba7dcaec088117743207b04ae82aa9de4888e74397a4c59b76180fa
MD5 770436939a15eea2fa02b94a00fabdeb
SHA1 85061e340ba56dbb8e0f918cb6382ea29ea42620
SHA512 c27a90a05af7cadf1fc2ec5849fde811575b2650a325618b7049696f04d115ba867481b350c65e35560caad9eebb682a8aa3d91b5c26ac2918200b0069accef2
SSDEEP 3072:wOwKRo2tTTgi/joh5TvgXHL/JZlrAKIX3wVyt4zczP22tThsNbNweGj+Qo6hNz5M:YQlb/OgXrjlrs4zczP22tThsIeGjY6u
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23520

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW InitializeCriticalSection GlobalAlloc LoadLibraryW CopyFileW GetFileAttributesA WriteConsoleW GetVolumePathNameA LCMapStringA CreateMutexW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW WriteConsoleA GetProcessWorkingSetSize RemoveDirectoryW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA GetConsoleAliasesW FillConsoleOutputCharacterA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing