file[.]exe | Triage™

General

Target
file.exe
Size 423KB
Sample221206-2ghc1sae53
SHA256 2377661d79045ec2697eebbbd3f5499de423b32db5724eaeb8a5350bee7a7292
MD5 63d328bafb89e59b83eaadebc7377a0f
SHA1 b46d01df7dbb1b9a75b0e6162f45c70e5203a9cf
SHA512 4ac1fdb0c2ba80743101149d0ad8a79ce16cc2612034d0be87f0d5a7580f439a3dfbfcbc1740652870745f5204c3b925c8b34a2f6c2d3d86328d8d215a2edb3b
SSDEEP 6144:Dn4+eZrkLxPUM0DBp5wjWhG0BCIbY5zAWcoBlCqOWKdaVe:z47Zg9PU3z2/MbY5fcWCDd3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 423KB

file.exe

IMPHASH 7bc1ad5b4cc7227f84b5861bc5954325
SHA256 2377661d79045ec2697eebbbd3f5499de423b32db5724eaeb8a5350bee7a7292
MD5 63d328bafb89e59b83eaadebc7377a0f
SHA1 b46d01df7dbb1b9a75b0e6162f45c70e5203a9cf
SHA512 4ac1fdb0c2ba80743101149d0ad8a79ce16cc2612034d0be87f0d5a7580f439a3dfbfcbc1740652870745f5204c3b925c8b34a2f6c2d3d86328d8d215a2edb3b
SSDEEP 6144:Dn4+eZrkLxPUM0DBp5wjWhG0BCIbY5zAWcoBlCqOWKdaVe:z47Zg9PU3z2/MbY5fcWCDd3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW GetVolumeNameForVolumeMountPointA GetStringTypeA GetCPInfo GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA EnumSystemCodePagesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetConsoleAliasesW GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetFileInformationByHandle SetFileAttributesW LCMapStringW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind SetFilePointer RaiseException TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

Sharing