file[.]exe | Triage™

General

Target
file.exe
Size 380KB
Sample221204-1cf4qagd67
SHA256 dea9c08c4923130f955a8a7a20ffc832bbaafc28b414a7a1a6686860e83d98a2
MD5 f990042d798722b3990094c81f0acfc9
SHA1 680ee4e2f7ef1b5d75219cdf91c75db7c2e6844f
SHA512 77a0c64ae6e12c163cb26853d2a550428757a1d82f3781e35f1fb8358a9db7ddc37a2dfeb4d146fc71f46ce2ab6e0a0eca5d64e4db3ce11082e1ecb4b5b3f052
SSDEEP 6144:JzOPJKVhoUOCDQo7aBfmwvPN4eUYPO79Dxymlgl9WfaG1PI:JzOPE+URNWOYNdUrVyWgldG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 380KB

file.exe

IMPHASH d500f3a6c1ef9dc55521fc789572de2b
SHA256 dea9c08c4923130f955a8a7a20ffc832bbaafc28b414a7a1a6686860e83d98a2
MD5 f990042d798722b3990094c81f0acfc9
SHA1 680ee4e2f7ef1b5d75219cdf91c75db7c2e6844f
SHA512 77a0c64ae6e12c163cb26853d2a550428757a1d82f3781e35f1fb8358a9db7ddc37a2dfeb4d146fc71f46ce2ab6e0a0eca5d64e4db3ce11082e1ecb4b5b3f052
SSDEEP 6144:JzOPJKVhoUOCDQo7aBfmwvPN4eUYPO79Dxymlgl9WfaG1PI:JzOPE+URNWOYNdUrVyWgldG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21825

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW FillConsoleOutputCharacterA GetFileSize SetCriticalSectionSpinCount GetCPInfo GetProfileIntW WaitNamedPipeA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA WriteConsoleW GetVolumePathNameA SetThreadPriority DisconnectNamedPipe GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GetVolumeNameForVolumeMountPointW SetFileAttributesW LCMapStringW HeapFree HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle HeapSize CreateFileA CloseHandle

Sharing