file[.]exe | Triage™

General

Target
file.exe
Size 379KB
Sample221206-mhm8bscf51
SHA256 3d70e4d045f4c5dd9beb0da9be2bf9930bf57c85d45dd9664f9ba940b38c2123
MD5 69872f3fe7ee1646a3e9db70060aed5b
SHA1 fc5e7b4caa8af614a34ea1288472b10d884183f5
SHA512 04eaf76e0b8f0128419bc595604f91ea49ac5dd028b6cd9ec2949f080e65f1066d05e25880f375664a808ab795cac8b436a0b3aba3d55a751fe086d519a8db42
SSDEEP 6144:LQdyPnLBQDB1bVYNRrIKb+AKmoT5yigS3xPMk:Lsy/FQDB1JaR/b+Axo9yzS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 379KB

file.exe

IMPHASH 5a897f6ab7bb8de4ca18be355d40a786
SHA256 3d70e4d045f4c5dd9beb0da9be2bf9930bf57c85d45dd9664f9ba940b38c2123
MD5 69872f3fe7ee1646a3e9db70060aed5b
SHA1 fc5e7b4caa8af614a34ea1288472b10d884183f5
SHA512 04eaf76e0b8f0128419bc595604f91ea49ac5dd028b6cd9ec2949f080e65f1066d05e25880f375664a808ab795cac8b436a0b3aba3d55a751fe086d519a8db42
SSDEEP 6144:LQdyPnLBQDB1bVYNRrIKb+AKmoT5yigS3xPMk:Lsy/FQDB1JaR/b+Axo9yzS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30232

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameA SetCriticalSectionSpinCount GetStringTypeA GetCPInfo CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetFileType FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW SetFileAttributesW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing