file[.]exe | Triage™

General

Target
file.exe
Size 320KB
Sample221206-gde39shf49
SHA256 3549d76fa5cba791831358a7a034dd7b1dde1d30c654ab2d45a824dfd8cefc08
MD5 6b965fe88e20b634892675ebd0dfac27
SHA1 88e2890cb3545d6d28b518b6bf0fff3148ae11aa
SHA512 c46dcf9453f40cf8b41e3099ce6c62c0ba5db15269b97bf4af909f2ff7cf4ceb618779c5aca8e5de9e601893fc48f39786b45f84c6f0eb1fef77541f355b214b
SSDEEP 6144:QjNBy+/L21T8xe6ySlk/WOL7CCB/UvZhbmHyMkE6VWF:Qjzyka1T8xpgLGCGRhbmXF6VWF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 320KB

file.exe

IMPHASH 42b39fab5d41637093f30a54656028ca
SHA256 3549d76fa5cba791831358a7a034dd7b1dde1d30c654ab2d45a824dfd8cefc08
MD5 6b965fe88e20b634892675ebd0dfac27
SHA1 88e2890cb3545d6d28b518b6bf0fff3148ae11aa
SHA512 c46dcf9453f40cf8b41e3099ce6c62c0ba5db15269b97bf4af909f2ff7cf4ceb618779c5aca8e5de9e601893fc48f39786b45f84c6f0eb1fef77541f355b214b
SSDEEP 6144:QjNBy+/L21T8xe6ySlk/WOL7CCB/UvZhbmHyMkE6VWF:Qjzyka1T8xpgLGCGRhbmXF6VWF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30280

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW GetFileSize SetCriticalSectionSpinCount GetCPInfo CreateJobObjectW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing