file[.]exe | Triage™

General

Target
file.exe
Size 410KB
Sample221204-2py1qscf74
SHA256 328678b277b9733b1eaa662113a67cd61e04e96f4644b8623aadbd5b9e6b86cf
MD5 6fdebc9ff81d0068e8f7f57a41a42ebc
SHA1 33b44f4844e7ef23d9a41301e92bbc55ac6a0397
SHA512 6b30f54c66429032233bae2be8480114161909c9db6977fdc5cd4577410a0164405ecae77694eb9eb1e5922575425168fcc51dfa510fcdb553a88aef4801d745
SSDEEP 6144:rO9puA1ooCPY9v2PlyKa12sOp2Nwcf8ymlgl5qWG1PI:rO9IA+oCzPlbTsW22c0yWgloWG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 410KB

file.exe

IMPHASH e6ea97fac557072bfe18a356e09758c3
SHA256 328678b277b9733b1eaa662113a67cd61e04e96f4644b8623aadbd5b9e6b86cf
MD5 6fdebc9ff81d0068e8f7f57a41a42ebc
SHA1 33b44f4844e7ef23d9a41301e92bbc55ac6a0397
SHA512 6b30f54c66429032233bae2be8480114161909c9db6977fdc5cd4577410a0164405ecae77694eb9eb1e5922575425168fcc51dfa510fcdb553a88aef4801d745
SSDEEP 6144:rO9puA1ooCPY9v2PlyKa12sOp2Nwcf8ymlgl5qWG1PI:rO9IA+oCzPlbTsW22c0yWgloWG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30617

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW FillConsoleOutputCharacterA GetFileSize SetCriticalSectionSpinCount GetCPInfo GetProfileIntW WaitNamedPipeA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA TlsSetValue GetVolumeInformationA GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA WriteConsoleW GetVolumePathNameA SetThreadPriority DisconnectNamedPipe GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW LCMapStringW HeapFree HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing