file[.]exe | Triage™

General

Target
file.exe
Size 415KB
Sample221206-vmd48afg65
SHA256 6f21814a1f99a8d173a6d49e6ba4f2cfac1b487836901b22cdc5cbb72ab91dca
MD5 db8650903d7aabfccd4cdbd8d200131a
SHA1 452f3e8c4ce313ead2dd5e1d01fb6924c3d607f0
SHA512 1bab53e5b208dbfe7fb0a9fcf0a0d37e34da760cda005677868040cdddd78789dc75ea796c78ebb74f501ad6b394e68d379b8dc5bd5c8bfaaee15cb0d389d01f
SSDEEP 12288:dq4Zz/z/xla+s+6K3bF/73M0o7QkBYcWCLZH:dRzdl++ZrF/Qx5BYcWC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 415KB

file.exe

IMPHASH 0e78f4629b890d8a833d745c3f7cbef7
SHA256 6f21814a1f99a8d173a6d49e6ba4f2cfac1b487836901b22cdc5cbb72ab91dca
MD5 db8650903d7aabfccd4cdbd8d200131a
SHA1 452f3e8c4ce313ead2dd5e1d01fb6924c3d607f0
SHA512 1bab53e5b208dbfe7fb0a9fcf0a0d37e34da760cda005677868040cdddd78789dc75ea796c78ebb74f501ad6b394e68d379b8dc5bd5c8bfaaee15cb0d389d01f
SSDEEP 12288:dq4Zz/z/xla+s+6K3bF/73M0o7QkBYcWCLZH:dRzdl++ZrF/Qx5BYcWC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28855

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameA GetStringTypeA GetCPInfo GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA EnumSystemCodePagesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetConsoleAliasesW GetProfileIntA FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle SetFileAttributesW LCMapStringW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind SetFilePointer RaiseException TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

Sharing