file[.]exe | Triage™

General

Target
file.exe
Size 257KB
Sample221106-rcpanagfcn
SHA256 1a6fa2a940161880eab43dcf8e785bdd54f5ae0f46eb8bfc9d2401d88e76c8d5
MD5 b202eeae66b5249ca68359265522f1db
SHA1 5156043490bd1daf0ca3f6adf87c46977af36c64
SHA512 af93ea0854932569e9623f0953a2c0072d15d2a218b42169c974ca8e7d635f70a50163c5efe02772bcdff69165dd86ede88c0eff90e4a05e985a9c02ea19ae47
SSDEEP 6144:qvwUOaYbwWP26xYEqbg+ZlsGzS4bpham4Mv6jeEd+A:qvwUOaYbdqbg+ZlVS8hp2eEUA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 257KB

file.exe

IMPHASH 12c01dde7af8fc41fdeec78d9228679d
SHA256 1a6fa2a940161880eab43dcf8e785bdd54f5ae0f46eb8bfc9d2401d88e76c8d5
MD5 b202eeae66b5249ca68359265522f1db
SHA1 5156043490bd1daf0ca3f6adf87c46977af36c64
SHA512 af93ea0854932569e9623f0953a2c0072d15d2a218b42169c974ca8e7d635f70a50163c5efe02772bcdff69165dd86ede88c0eff90e4a05e985a9c02ea19ae47
SSDEEP 6144:qvwUOaYbwWP26xYEqbg+ZlsGzS4bpham4Mv6jeEd+A:qvwUOaYbdqbg+ZlVS8hp2eEUA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9826

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep GetCurrentThreadId CloseHandle WaitForSingleObjectEx GetExitCodeThread EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess WriteConsoleW RtlUnwind RaiseException GetLastError SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType GetFileSizeEx SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize HeapReAlloc CreateFileW DecodePointer

Sharing