file[.]exe | Triage™

General

Target
file.exe
Size 410KB
Sample221205-ag6xtsch4w
SHA256 ac2b87f5c36ca87e0a463564feb6023a11021f2c732adbc632cc9e3c8752133c
MD5 444b711903f9025bfb7ef9965c222b24
SHA1 05ffbcd8e3576940cda4443c6fb4e9b59aeb0fdc
SHA512 9ece4e9d0ecd5bb4c2d206ab82ac57717275f6ad702c01007e3ab130a89435660e231ca5e55efb0787ba77e670e18f29272ac75165719a2481e46e215fab6a17
SSDEEP 6144:NOFpuA1ooCPBxY/61kSsbxdDONc9lNm/rTtymlglqhX+3kG1PI:NOFIA+oCpxQukSs7uc+yWglqhX+0G
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 410KB

file.exe

IMPHASH e6ea97fac557072bfe18a356e09758c3
SHA256 ac2b87f5c36ca87e0a463564feb6023a11021f2c732adbc632cc9e3c8752133c
MD5 444b711903f9025bfb7ef9965c222b24
SHA1 05ffbcd8e3576940cda4443c6fb4e9b59aeb0fdc
SHA512 9ece4e9d0ecd5bb4c2d206ab82ac57717275f6ad702c01007e3ab130a89435660e231ca5e55efb0787ba77e670e18f29272ac75165719a2481e46e215fab6a17
SSDEEP 6144:NOFpuA1ooCPBxY/61kSsbxdDONc9lNm/rTtymlglqhX+3kG1PI:NOFIA+oCpxQukSs7uc+yWglqhX+0G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30617

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW FillConsoleOutputCharacterA GetFileSize SetCriticalSectionSpinCount GetCPInfo GetProfileIntW WaitNamedPipeA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA TlsSetValue GetVolumeInformationA GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA WriteConsoleW GetVolumePathNameA SetThreadPriority DisconnectNamedPipe GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW LCMapStringW HeapFree HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing