file[.]exe | Triage™

General

Target
file.exe
Size 320KB
Sample221206-kgfezsdh21
SHA256 f1ded307680bac8bdd1bfb1ed6af9f7e659f2b2e5e2fb7a5467ff25cf91f5c16
MD5 e3504c28e4303d1aa3c0c68a08010e48
SHA1 db1cf225af7a6a69f83948ce1ef803c8feca965e
SHA512 2792aa6daf2abcff25b1ec41ecee9c5e53a58b37833469b57069e5b53c96db4c1d779c138cb42ad170ac0ef65861fc0bb8f02657629f7a4d44da837fdf418a31
SSDEEP 3072:1y8X2jPwN+OyeHbqYLbBdYJFB5aAuDeSJFy1umxHbxcnaNbIkfghYYaUQhJds0SW:9VNZyeFLbfYJFeAaJijcaN0igGrjpF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 320KB

file.exe

IMPHASH 42b39fab5d41637093f30a54656028ca
SHA256 f1ded307680bac8bdd1bfb1ed6af9f7e659f2b2e5e2fb7a5467ff25cf91f5c16
MD5 e3504c28e4303d1aa3c0c68a08010e48
SHA1 db1cf225af7a6a69f83948ce1ef803c8feca965e
SHA512 2792aa6daf2abcff25b1ec41ecee9c5e53a58b37833469b57069e5b53c96db4c1d779c138cb42ad170ac0ef65861fc0bb8f02657629f7a4d44da837fdf418a31
SSDEEP 3072:1y8X2jPwN+OyeHbqYLbBdYJFB5aAuDeSJFy1umxHbxcnaNbIkfghYYaUQhJds0SW:9VNZyeFLbfYJFeAaJijcaN0igGrjpF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30280

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW GetFileSize SetCriticalSectionSpinCount GetCPInfo CreateJobObjectW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing