file[.]exe | Triage™

General

Target
file.exe
Size 266KB
Sample221007-jxpg6acbcp
SHA256 44dc53fbf47e1ca612ce2a85f429c062f5040eee43323740733ca935839356a4
MD5 9d9da4319e0fff70db698857b74a797e
SHA1 908841de7d76f4931dd62da3ab1b208f1b5b9cef
SHA512 6732cf111f06b22f37144a14c1cb23a74719e79bf784d3cf4d19ff76022da0280b298e32df974a820e2740e64792f831ebbd2183e2debd27fb074cb6eade3058
SSDEEP 3072:wXYJhTF6U0v47VZx5K168SGzdshfSylhWM3ATyEzWrxpzbgqruzrOxpZa9uD6VdB:k4y47alpSd1FEuzbgwuzrYwVfU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 266KB

file.exe

IMPHASH 253e5cba178f9b60249e48cf66c139a4
SHA256 44dc53fbf47e1ca612ce2a85f429c062f5040eee43323740733ca935839356a4
MD5 9d9da4319e0fff70db698857b74a797e
SHA1 908841de7d76f4931dd62da3ab1b208f1b5b9cef
SHA512 6732cf111f06b22f37144a14c1cb23a74719e79bf784d3cf4d19ff76022da0280b298e32df974a820e2740e64792f831ebbd2183e2debd27fb074cb6eade3058
SSDEEP 3072:wXYJhTF6U0v47VZx5K168SGzdshfSylhWM3ATyEzWrxpzbgqruzrOxpZa9uD6VdB:k4y47alpSd1FEuzbgwuzrYwVfU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29808

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole FindResourceExW SetConsoleTextAttribute GetConsoleAliasA WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW SetCommTimeouts EnumResourceTypesA GetVolumePathNameW SetFileShortNameW LoadLibraryW CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetConsoleAliasW GetFileAttributesW GetGeoInfoA GetTimeZoneInformation GetBinaryTypeW WritePrivateProfileStringW GetShortPathNameA GetLastError GetProcAddress GetLongPathNameA VirtualAlloc WriteConsoleOutputCharacterW SearchPathW ResetEvent OpenWaitableTimerA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW GetFileType AddVectoredExceptionHandler GlobalGetAtomNameW AddAtomA FoldStringW EnumResourceTypesW GlobalWire GetModuleFileNameA FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW GetConsoleTitleW VirtualProtect GetFileAttributesExW PeekConsoleInputA GetCPInfoExA ReadConsoleInputW DeleteFileW IsBadHugeWritePtr FindFirstChangeNotificationW FillConsoleOutputCharacterA GetComputerNameA BeginUpdateResourceW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection WriteFile InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

CloseEventLog DeregisterEventSource

Sharing