file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample221206-ltx18sfb88
SHA256 8cb087d86258be00fbdb327c9bf8e4546e2373c39b3dfbd44833f5d32758bd22
MD5 8acb7fdd9980abc8149bb8443fa3d093
SHA1 6e3fd659b2e7614499530fb8f13d459701a04dbc
SHA512 ff795c6de9cdf568e93fb0845dd7ae54a69071fddb3c2a82521927132b734967099ecaff811d101d5ecc727e548bce30925193838fa5e4651b30d3fe320a49ec
SSDEEP 6144:idnyHJLjj0BnTtiJtSKSvAxtEn6eq55ad81uF:iNyp/j0BnBrfvAxGXqduF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH 42b39fab5d41637093f30a54656028ca
SHA256 8cb087d86258be00fbdb327c9bf8e4546e2373c39b3dfbd44833f5d32758bd22
MD5 8acb7fdd9980abc8149bb8443fa3d093
SHA1 6e3fd659b2e7614499530fb8f13d459701a04dbc
SHA512 ff795c6de9cdf568e93fb0845dd7ae54a69071fddb3c2a82521927132b734967099ecaff811d101d5ecc727e548bce30925193838fa5e4651b30d3fe320a49ec
SSDEEP 6144:idnyHJLjj0BnTtiJtSKSvAxtEn6eq55ad81uF:iNyp/j0BnBrfvAxGXqduF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30264

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW GetFileSize SetCriticalSectionSpinCount GetCPInfo CreateJobObjectW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing