file[.]exe | Triage™

General

Target
file.exe
Size 346KB
Sample221123-e3n2csbb29
SHA256 06e6c4d3d6feacaa02d8e452d0ba8ae9a3c823f5d7247cb98f040556770568df
MD5 f97c4582230ad32793f9d9bf5b1f870a
SHA1 7cba75c05842c98e721e2b8b718a992fff2c84fb
SHA512 ef12b64ee4e8e4d828a6e0c2851ff7f4caaa436c179f4d0e4ebc4a72e889e512b98050cf543769a4e139fd050275cd45327cca6d3ff301276a197244d356b8bd
SSDEEP 6144:RxfwEFX+70BfuHON4c0FTBaM53xrX4lO6fE6N:RZwmO7VuN43d1rDJ6N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 346KB

file.exe

IMPHASH 7e22feed739071e8c50ce1f9fbef6d80
SHA256 06e6c4d3d6feacaa02d8e452d0ba8ae9a3c823f5d7247cb98f040556770568df
MD5 f97c4582230ad32793f9d9bf5b1f870a
SHA1 7cba75c05842c98e721e2b8b718a992fff2c84fb
SHA512 ef12b64ee4e8e4d828a6e0c2851ff7f4caaa436c179f4d0e4ebc4a72e889e512b98050cf543769a4e139fd050275cd45327cca6d3ff301276a197244d356b8bd
SSDEEP 6144:RxfwEFX+70BfuHON4c0FTBaM53xrX4lO6fE6N:RZwmO7VuN43d1rDJ6N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22224

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetUserDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW SetCommState GetVolumePathNameW GlobalAlloc LoadLibraryW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW CreateJobObjectA LCMapStringA GetConsoleAliasesW FillConsoleOutputCharacterW SetLastError GetFullPathNameA GetProcAddress VirtualAlloc CopyFileA CreateHardLinkW SetProcessWorkingSetSize OpenJobObjectW FoldStringA GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA ReadConsoleOutputCharacterA GetComputerNameA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile WriteConsoleA GetConsoleOutputCP

gdi32

GetCharacterPlacementA

ole32

CoRevokeMallocSpy

Sharing