file[.]exe | Triage™

General

Target
file.exe
Size 371KB
Sample221205-ay2z7sed2w
SHA256 18180a401682ac1e11f87fbc95a9de4c066d7899c930a963c5fd7ddb557ea535
MD5 cd06a4b41c1edeb8fde3f2a80eac16d1
SHA1 76cf1faed226ba771dc13e37406bbcbe9faa69ef
SHA512 b06463e9ef80f158b0a43b1e76be4f2e4c083bf1de2f1ac4c683668d3a4d6f539323421b57af8c98a56f0b93496e9c4abc6b5709f47a48a344a9a1b61eecfa06
SSDEEP 6144:tOtw3ATi9Iwkbdg1Qc6TYYHF5cyHymlglQdaG1PI:tOtQAe9IzZgCXsYH5HyWglJG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 371KB

file.exe

IMPHASH e6ea97fac557072bfe18a356e09758c3
SHA256 18180a401682ac1e11f87fbc95a9de4c066d7899c930a963c5fd7ddb557ea535
MD5 cd06a4b41c1edeb8fde3f2a80eac16d1
SHA1 76cf1faed226ba771dc13e37406bbcbe9faa69ef
SHA512 b06463e9ef80f158b0a43b1e76be4f2e4c083bf1de2f1ac4c683668d3a4d6f539323421b57af8c98a56f0b93496e9c4abc6b5709f47a48a344a9a1b61eecfa06
SSDEEP 6144:tOtw3ATi9Iwkbdg1Qc6TYYHF5cyHymlglQdaG1PI:tOtQAe9IzZgCXsYH5HyWglJG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30601

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW FillConsoleOutputCharacterA GetFileSize SetCriticalSectionSpinCount GetCPInfo GetProfileIntW WaitNamedPipeA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA TlsSetValue GetVolumeInformationA GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA WriteConsoleW GetVolumePathNameA SetThreadPriority DisconnectNamedPipe GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW LCMapStringW HeapFree HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing