file[.]exe | Triage™

General

Target
file.exe
Size 417KB
Sample221206-pebfgabb7v
SHA256 cceb75ae68e8a9ed006e36bd335ca011bfbce3c96de676c1d469bc65fb3894bb
MD5 ab398d4d818725d0d0a2b5abba54f2e8
SHA1 8ad764a1bd4d1b743602b89707c6d85a22f0642b
SHA512 a56af409cb7f3ce1fe02859979ea3ed26968a09352008c6c53bf67390c6db94c5f387f1aee7bedc5e04946887597a5f97421321b3cbcaeb1259b014add8c5a1e
SSDEEP 6144:Gc3yMJLj512cbW/G00qHixTxxmBHd3JufGWhd1xMyigGPMk:GWysP512ck5d0TXmd+NhWyz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 417KB

file.exe

IMPHASH 5a897f6ab7bb8de4ca18be355d40a786
SHA256 cceb75ae68e8a9ed006e36bd335ca011bfbce3c96de676c1d469bc65fb3894bb
MD5 ab398d4d818725d0d0a2b5abba54f2e8
SHA1 8ad764a1bd4d1b743602b89707c6d85a22f0642b
SHA512 a56af409cb7f3ce1fe02859979ea3ed26968a09352008c6c53bf67390c6db94c5f387f1aee7bedc5e04946887597a5f97421321b3cbcaeb1259b014add8c5a1e
SSDEEP 6144:Gc3yMJLj512cbW/G00qHixTxxmBHd3JufGWhd1xMyigGPMk:GWysP512ck5d0TXmd+NhWyz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30232

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameA SetCriticalSectionSpinCount GetStringTypeA GetCPInfo CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetFileType FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW SetFileAttributesW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing