file[.]exe | Triage™

General

Target
file.exe
Size 302KB
Sample221122-y2n5hsfg34
SHA256 569653b03662b2f7d1a667ecadb96bb12c865f5974d318edad24c1e7aaa649fc
MD5 a11518676ed768fb291a89df6bafb869
SHA1 e4f3f391a68203a7c40b77161653598216d707a6
SHA512 3a9e0e957f711b2e5ec7b8fcc1178960cd8abf03753b9d3a0b6c39c7136afd945f3209834738fe7c2ec35c33d982558d1d7cc7901d318228b4418bc90f73ed1f
SSDEEP 6144:oOLRrVODa68inGtUGmj3LrX4lO6fE6Nn:vlVr5inGtUGiLrDJ6N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 302KB

file.exe

IMPHASH a2621436f4406f4307af4f1128888722
SHA256 569653b03662b2f7d1a667ecadb96bb12c865f5974d318edad24c1e7aaa649fc
MD5 a11518676ed768fb291a89df6bafb869
SHA1 e4f3f391a68203a7c40b77161653598216d707a6
SHA512 3a9e0e957f711b2e5ec7b8fcc1178960cd8abf03753b9d3a0b6c39c7136afd945f3209834738fe7c2ec35c33d982558d1d7cc7901d318228b4418bc90f73ed1f
SSDEEP 6144:oOLRrVODa68inGtUGmj3LrX4lO6fE6Nn:vlVr5inGtUGiLrDJ6N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23056

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA OpenJobObjectA GetCommState GetUserDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW GlobalAlloc LoadLibraryW LeaveCriticalSection GetFileAttributesA GetFileAttributesW WriteConsoleW CreateJobObjectA LCMapStringA GetConsoleAliasesW FillConsoleOutputCharacterW GetLastError GetFullPathNameA ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA EnumSystemCodePagesW GetProcessWorkingSetSize CreateHardLinkW OpenJobObjectW FoldStringA GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA SetLastError GetComputerNameA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile WriteConsoleA GetConsoleOutputCP

gdi32

GetCharacterPlacementA

ole32

CoRevokeMallocSpy

Sharing