file[.]exe | Triage™

General

Target
file.exe
Size 371KB
Sample221205-b9t96sed77
SHA256 6eb55c2887724ad2f5aec84ed628253b3c898e3cdd5938d80989881f576c87b3
MD5 b4ac71051b7581b91744f75c5637a685
SHA1 9f5a52f39db977662f61841169ebd1aa9611dc25
SHA512 5015f287e730ed0b76afd662c2fd8d8d05dde35991ac1d6bfcf30e8186161e29f0a05366cb232810578aabe14fe088a019aff9909812393e41f161dc07fb47f3
SSDEEP 6144:OOewpgBAoRh2P6qyGINfI+KlOrymlgltFSUaG1PI:OOewAAkh2FyVBIAryWgltPaG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 371KB

file.exe

IMPHASH e6ea97fac557072bfe18a356e09758c3
SHA256 6eb55c2887724ad2f5aec84ed628253b3c898e3cdd5938d80989881f576c87b3
MD5 b4ac71051b7581b91744f75c5637a685
SHA1 9f5a52f39db977662f61841169ebd1aa9611dc25
SHA512 5015f287e730ed0b76afd662c2fd8d8d05dde35991ac1d6bfcf30e8186161e29f0a05366cb232810578aabe14fe088a019aff9909812393e41f161dc07fb47f3
SSDEEP 6144:OOewpgBAoRh2P6qyGINfI+KlOrymlgltFSUaG1PI:OOewAAkh2FyVBIAryWgltPaG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30617

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW FillConsoleOutputCharacterA GetFileSize SetCriticalSectionSpinCount GetCPInfo GetProfileIntW WaitNamedPipeA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA TlsSetValue GetVolumeInformationA GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA WriteConsoleW GetVolumePathNameA SetThreadPriority DisconnectNamedPipe GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW LCMapStringW HeapFree HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing