file[.]exe | Triage™

General

Target
file.exe
Size 415KB
Sample221206-t9ylpsef65
SHA256 460cefdbf462c9c703ef882a017d0e9ecf62d0ff1a9231608cf1b67eee9fccfa
MD5 7d4dbb2fb0095d27dd4aae90c492a2e1
SHA1 83b5a11d76869b819d51ba94e81f9d72daa42293
SHA512 d5856e6c44cf9d4722d849b27682f5ec216a5d35890f151a8a677466dec89902a525a5d64feaca6b105645f505750e1665a85b3b7257bed2966c49149cfa32d1
SSDEEP 6144:ntsG/ZN6LJFS+EsXQC9QUHRjF+8I/G6SZYg2WcoBlCsn/w3aV:ntsmZANFS51ARxjlZPcWCt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 415KB

file.exe

IMPHASH 0e78f4629b890d8a833d745c3f7cbef7
SHA256 460cefdbf462c9c703ef882a017d0e9ecf62d0ff1a9231608cf1b67eee9fccfa
MD5 7d4dbb2fb0095d27dd4aae90c492a2e1
SHA1 83b5a11d76869b819d51ba94e81f9d72daa42293
SHA512 d5856e6c44cf9d4722d849b27682f5ec216a5d35890f151a8a677466dec89902a525a5d64feaca6b105645f505750e1665a85b3b7257bed2966c49149cfa32d1
SSDEEP 6144:ntsG/ZN6LJFS+EsXQC9QUHRjF+8I/G6SZYg2WcoBlCsn/w3aV:ntsmZANFS51ARxjlZPcWCt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameA GetStringTypeA GetCPInfo GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA EnumSystemCodePagesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetConsoleAliasesW GetProfileIntA FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle SetFileAttributesW LCMapStringW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind SetFilePointer RaiseException TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

Sharing