file[.]exe | Triage™

General

Target
file.exe
Size 423KB
Sample221206-2v4heaef3x
SHA256 ab65f0ca3113dcd8055b8bb4c518d810bb7f74ad8687bb8e78391dfed6e5522f
MD5 d4ea2f8e05b83e3431bc687d0b722bbc
SHA1 96c553d55609a91bd5018c98888b66498159f11c
SHA512 bf3ffe3116ec52b5d961e8ddf2ec0eea746a66863520189980a6df3b5bf6d10d406bcbdb9ed159248427d3a313e2abb481ae45c39257bb208bcccac3566be8cb
SSDEEP 6144:DID++gJiZLELyLcsyT8RojjZpJPKhpNYTKAWcoBlCLE4caVe:DquJiZgWLcJgdhEgcWCLE73
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 423KB

file.exe

IMPHASH 7bc1ad5b4cc7227f84b5861bc5954325
SHA256 ab65f0ca3113dcd8055b8bb4c518d810bb7f74ad8687bb8e78391dfed6e5522f
MD5 d4ea2f8e05b83e3431bc687d0b722bbc
SHA1 96c553d55609a91bd5018c98888b66498159f11c
SHA512 bf3ffe3116ec52b5d961e8ddf2ec0eea746a66863520189980a6df3b5bf6d10d406bcbdb9ed159248427d3a313e2abb481ae45c39257bb208bcccac3566be8cb
SSDEEP 6144:DID++gJiZLELyLcsyT8RojjZpJPKhpNYTKAWcoBlCLE4caVe:DquJiZgWLcJgdhEgcWCLE73
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW GetVolumeNameForVolumeMountPointA GetStringTypeA GetCPInfo GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA EnumSystemCodePagesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetConsoleAliasesW GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetFileInformationByHandle SetFileAttributesW LCMapStringW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind SetFilePointer RaiseException TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

Sharing