file[.]exe | Triage™

General

Target
file.exe
Size 423KB
Sample221206-1q2ycaaf2w
SHA256 e6657fb698d637dfdfa9f775444fba7cdaa80016745ed0cd342f7aa07e176ad5
MD5 bc00d317eb60d8f572685d0ec8329b5c
SHA1 ebca2c93e8f59db62b08bfa2588f77b02c3671d7
SHA512 f3c470d27fcb7a6cdd9f33b0fee55e8ec18779fe9bf5370c735d0cacc969d3be8c4b7a554e5c0a76e4696431c8006bfc8c8f8a30c87958f931054b0220184630
SSDEEP 6144:YtcJZQ/LrAJPkIrz6ynIH14kjA+2amAWcoBlCJdKSaVe:YtSZ+PAJsssjtAcWCJdl3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 423KB

file.exe

IMPHASH 7bc1ad5b4cc7227f84b5861bc5954325
SHA256 e6657fb698d637dfdfa9f775444fba7cdaa80016745ed0cd342f7aa07e176ad5
MD5 bc00d317eb60d8f572685d0ec8329b5c
SHA1 ebca2c93e8f59db62b08bfa2588f77b02c3671d7
SHA512 f3c470d27fcb7a6cdd9f33b0fee55e8ec18779fe9bf5370c735d0cacc969d3be8c4b7a554e5c0a76e4696431c8006bfc8c8f8a30c87958f931054b0220184630
SSDEEP 6144:YtcJZQ/LrAJPkIrz6ynIH14kjA+2amAWcoBlCJdKSaVe:YtSZ+PAJsssjtAcWCJdl3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW GetVolumeNameForVolumeMountPointA GetStringTypeA GetCPInfo GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA EnumSystemCodePagesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetConsoleAliasesW GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetFileInformationByHandle SetFileAttributesW LCMapStringW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind SetFilePointer RaiseException TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

Sharing