file[.]exe | Triage™

General

Target
file.exe
Size 380KB
Sample221204-v6522sbb88
SHA256 a5e0a8d94d854de7b2c94d4b196449ecfae16dfde2d917ed1cc9cb7726069a40
MD5 91176af73e5f4c5c01e6c8ce88a481a0
SHA1 e5349d540c50972802e1825c1c3dd68002f7e8b8
SHA512 7c5ddfb8d279eadfbc594d916a359269cc43dd4b17b11e0a4f9562b33adb09416aab7de6a0341c3dff1bc380f2f3e06bfa390e531322b3a6a6e2edaf871bcf70
SSDEEP 6144:XBPegtXz3z9PCY8Xv1LFMirYsy91ymlgl0KOqG1PF:XBPTpz9PCYi1LyimyWglHBG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 380KB

file.exe

IMPHASH 567e4bf57511f77de8c52f2f12f49697
SHA256 a5e0a8d94d854de7b2c94d4b196449ecfae16dfde2d917ed1cc9cb7726069a40
MD5 91176af73e5f4c5c01e6c8ce88a481a0
SHA1 e5349d540c50972802e1825c1c3dd68002f7e8b8
SHA512 7c5ddfb8d279eadfbc594d916a359269cc43dd4b17b11e0a4f9562b33adb09416aab7de6a0341c3dff1bc380f2f3e06bfa390e531322b3a6a6e2edaf871bcf70
SSDEEP 6144:XBPegtXz3z9PCY8Xv1LFMirYsy91ymlgl0KOqG1PF:XBPTpz9PCYi1LyimyWglHBG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21831

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW FillConsoleOutputCharacterA GetFileSize SetCriticalSectionSpinCount GetCPInfo GetProfileIntW WaitNamedPipeA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA GetCalendarInfoW GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetVolumePathNameA SetThreadPriority GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GetVolumeNameForVolumeMountPointW SetFileAttributesW LCMapStringW HeapFree HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle HeapSize CreateFileA CloseHandle

Sharing