file[.]exe | Triage™

General

Target
file.exe
Size 358KB
Sample221206-ha7jsafc7x
SHA256 bb016708f2ac44b9a2c0d6b7c2943f5f3856071ff6d917545b2041cf9edb75d0
MD5 3ac56746366cc753c3dbc171244c9687
SHA1 94ece3a029fa5c0c533d1eb4b7acac8d135a0c1f
SHA512 82ff196a45763d720d87a7110279b0990741c30a5173bf48ff967592d29569782fd88482c79dcfd65ed3803b19747e2db5dcf516ed4884e39e8e80cfe2bf0318
SSDEEP 6144:bwKyQMLlhbOeTh8jcCOQfUjt6pLM9rZcg/gUPsjiGF:bTyRRhbOe1qcCOQfBKkWGF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 358KB

file.exe

IMPHASH 42b39fab5d41637093f30a54656028ca
SHA256 bb016708f2ac44b9a2c0d6b7c2943f5f3856071ff6d917545b2041cf9edb75d0
MD5 3ac56746366cc753c3dbc171244c9687
SHA1 94ece3a029fa5c0c533d1eb4b7acac8d135a0c1f
SHA512 82ff196a45763d720d87a7110279b0990741c30a5173bf48ff967592d29569782fd88482c79dcfd65ed3803b19747e2db5dcf516ed4884e39e8e80cfe2bf0318
SSDEEP 6144:bwKyQMLlhbOeTh8jcCOQfUjt6pLM9rZcg/gUPsjiGF:bTyRRhbOe1qcCOQfBKkWGF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30264

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW GetFileSize SetCriticalSectionSpinCount GetCPInfo CreateJobObjectW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing