file[.]exe | Triage™

General

Target
file.exe
Size 416KB
Sample221206-q8849sge3x
SHA256 499e5172f4d4865ce328b13d467a60a5f140c7cd03b455e58b3e9fbc4c4f3d92
MD5 8e44ef6211eb3bcba8c37a9740095179
SHA1 489273078bfc030615e9493f3d7379af1273d702
SHA512 1c04ace658c22056b49d3ded718aa4f2668673b91e9303a58b261f108928086a8377132c0e01738e5927a87a937fc8bd06b820436998612d2c03a4194a567d79
SSDEEP 6144:Bq0zEZAa/LzFHhTJU4uxxzHEMl7JIh0BA4Z6E7AWryigwB79PMk:Bq0zEZptHh1ZwFl7qqBA4oBeyzU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 416KB

file.exe

IMPHASH 1a508e7247e4fb10cdf3ad12d720aba7
SHA256 499e5172f4d4865ce328b13d467a60a5f140c7cd03b455e58b3e9fbc4c4f3d92
MD5 8e44ef6211eb3bcba8c37a9740095179
SHA1 489273078bfc030615e9493f3d7379af1273d702
SHA512 1c04ace658c22056b49d3ded718aa4f2668673b91e9303a58b261f108928086a8377132c0e01738e5927a87a937fc8bd06b820436998612d2c03a4194a567d79
SSDEEP 6144:Bq0zEZAa/LzFHhTJU4uxxzHEMl7JIh0BA4Z6E7AWryigwB79PMk:Bq0zEZptHh1ZwFl7qqBA4oBeyzU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29863

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameA GetStringTypeA GetCPInfo CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW GetCalendarInfoW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority DisconnectNamedPipe GetProfileIntA FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc WriteConsoleA GetProcessWorkingSetSize LocalAlloc GetFileType FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA TerminateJobObject GetVolumeNameForVolumeMountPointW SetFileAttributesW LCMapStringW MultiByteToWideChar HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetStartupInfoA WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind SetFilePointer RaiseException LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle CloseHandle CreateFileA HeapSize SetEndOfFile GetProcessHeap ReadFile

Sharing