file[.]exe | Triage™

General

Target
file.exe
Size 307KB
Sample221123-cjzmmsgc77
SHA256 8a501ac8fcf5efaec2c9b4bcba98ac7273e238fac42a0a2d24ad7323a989d1f3
MD5 f1f8e46e909cc788219983854454b07a
SHA1 b4f3f5711d5451501c9c85bb1b1ea16b6216494d
SHA512 033c43b35765d7515365ac86672dd221ca9be035ad260d3b558b32191e24eab351c3dc50fd77a00e2815c971a47a905ed2746f8f5f785dda9b32af8bba3e39d1
SSDEEP 3072:EfqsgBJWJUYUEw5AM7ZAiWViunb/2dJwmVGTtiPW38ZTh2obpBwXbXBKlO6fEm/6:0gbjEUmsaCdxVMI5ThBArX4lO6fE6N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 307KB

file.exe

IMPHASH 7e22feed739071e8c50ce1f9fbef6d80
SHA256 8a501ac8fcf5efaec2c9b4bcba98ac7273e238fac42a0a2d24ad7323a989d1f3
MD5 f1f8e46e909cc788219983854454b07a
SHA1 b4f3f5711d5451501c9c85bb1b1ea16b6216494d
SHA512 033c43b35765d7515365ac86672dd221ca9be035ad260d3b558b32191e24eab351c3dc50fd77a00e2815c971a47a905ed2746f8f5f785dda9b32af8bba3e39d1
SSDEEP 3072:EfqsgBJWJUYUEw5AM7ZAiWViunb/2dJwmVGTtiPW38ZTh2obpBwXbXBKlO6fEm/6:0gbjEUmsaCdxVMI5ThBArX4lO6fE6N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22224

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetUserDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW SetCommState GetVolumePathNameW GlobalAlloc LoadLibraryW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW CreateJobObjectA LCMapStringA GetConsoleAliasesW FillConsoleOutputCharacterW SetLastError GetFullPathNameA GetProcAddress VirtualAlloc CopyFileA CreateHardLinkW SetProcessWorkingSetSize OpenJobObjectW FoldStringA GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA ReadConsoleOutputCharacterA GetComputerNameA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile WriteConsoleA GetConsoleOutputCP

gdi32

GetCharacterPlacementA

ole32

CoRevokeMallocSpy

Sharing