file[.]exe | Triage™

General

Target
file.exe
Size 262KB
Sample221008-ppalxseghk
SHA256 391e1ce960761048e5f401cdfd2d7731f6b7712e7eea7d13699e0bb5cbf0b5ae
MD5 5f63751332c275515892ad23d433cfc1
SHA1 78b211da118f2c3d3ba25221c44994a4fd4fb355
SHA512 43a89b047797632e84afd5d9a7a17b066e93f197bcd37bd99b4bd02c212b33b0340c2cef68871dd48062aca3d2b01b3b003f39148f655af5149039139f2c34cf
SSDEEP 3072:TXhrnB+9C6sGgj2ftNFw5qI/XnPyyQEekHhfkGiChH27tOoeIBM/h3qpZa9uD6Vg:L1nB+QaVW3PyyuKeG3ieIBrwVfeXO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 262KB

file.exe

IMPHASH dd88ac724b67244cb11c60395526553b
SHA256 391e1ce960761048e5f401cdfd2d7731f6b7712e7eea7d13699e0bb5cbf0b5ae
MD5 5f63751332c275515892ad23d433cfc1
SHA1 78b211da118f2c3d3ba25221c44994a4fd4fb355
SHA512 43a89b047797632e84afd5d9a7a17b066e93f197bcd37bd99b4bd02c212b33b0340c2cef68871dd48062aca3d2b01b3b003f39148f655af5149039139f2c34cf
SSDEEP 3072:TXhrnB+9C6sGgj2ftNFw5qI/XnPyyQEekHhfkGiChH27tOoeIBM/h3qpZa9uD6Vg:L1nB+QaVW3PyyuKeG3ieIBrwVfeXO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28928

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA HeapFree SetVolumeMountPointW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW GetVolumePathNameW SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW CreateTimerQueueTimer SetComputerNameA SetConsoleTextAttribute SearchPathA LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetShortPathNameW GetCPInfoExA SetFileShortNameA GetFileInformationByHandle SetFileAttributesW DeleteFileA IsBadHugeReadPtr FindResourceExW AllocConsole GlobalGetAtomNameA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Resubmissions

Sharing