file[.]exe | Triage™

General

Target
file.exe
Size 358KB
Sample221206-ld69zagh4t
SHA256 ff367726c451ef7599cee67a51badaf6c96019165d55b2b5fbf4598502335efd
MD5 9aa75e68077b6931ceb2614e8c4398ab
SHA1 a1004d12ab58eb3716ec1a427be7d7beffac5529
SHA512 816d6c3511293bf83c7e39c12bea88e067285bd2977395a2f80a238eb276f24fd44f9cf41e50d692f0ea7a70b7e4c067b2bb438420f93b81e259a3eac8b5f855
SSDEEP 6144:NoHGyQyL3QzpZeQ50O4IV9FuyHJAkavffVN+F:Nomy7jQzpZx0O59s+JAdVN+F
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 358KB

file.exe

IMPHASH 42b39fab5d41637093f30a54656028ca
SHA256 ff367726c451ef7599cee67a51badaf6c96019165d55b2b5fbf4598502335efd
MD5 9aa75e68077b6931ceb2614e8c4398ab
SHA1 a1004d12ab58eb3716ec1a427be7d7beffac5529
SHA512 816d6c3511293bf83c7e39c12bea88e067285bd2977395a2f80a238eb276f24fd44f9cf41e50d692f0ea7a70b7e4c067b2bb438420f93b81e259a3eac8b5f855
SSDEEP 6144:NoHGyQyL3QzpZeQ50O4IV9FuyHJAkavffVN+F:Nomy7jQzpZx0O59s+JAdVN+F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30280

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW GetFileSize SetCriticalSectionSpinCount GetCPInfo CreateJobObjectW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing