file[.]exe | Triage™

General

Target
file.exe
Size 417KB
Sample221206-m99kmscb79
SHA256 7fe4df106cfa644d70167441ff7977fce0a5cc7aeeccd566747eb43763658682
MD5 7d187f80d2c1ea95ae09681101bb2c48
SHA1 c3adff1e06c46369dc5bae1c49711e6dac85a059
SHA512 189ed5def49ea5188d125e0e077672b39ae2956b620d481071954db6aa8aaa8129a405ca1a20ee919ec03f61080f028f53a91f4f2f71857778b03d98368a3498
SSDEEP 6144:tzKyBALVfM5lbGVAwpcemiWWs2UFoyig2RPMk:t2yepfM5lCVAWc2WWs26oyz2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 417KB

file.exe

IMPHASH 5a897f6ab7bb8de4ca18be355d40a786
SHA256 7fe4df106cfa644d70167441ff7977fce0a5cc7aeeccd566747eb43763658682
MD5 7d187f80d2c1ea95ae09681101bb2c48
SHA1 c3adff1e06c46369dc5bae1c49711e6dac85a059
SHA512 189ed5def49ea5188d125e0e077672b39ae2956b620d481071954db6aa8aaa8129a405ca1a20ee919ec03f61080f028f53a91f4f2f71857778b03d98368a3498
SSDEEP 6144:tzKyBALVfM5lbGVAwpcemiWWs2UFoyig2RPMk:t2yepfM5lCVAWc2WWs26oyz2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30232

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameA SetCriticalSectionSpinCount GetStringTypeA GetCPInfo CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetFileType FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW SetFileAttributesW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing