file[.]exe | Triage™

General

Target
file.exe
Size 271KB
Sample221114-1ba63sab4v
SHA256 07d09cd8e21489a6940e1adae30b355cb8859d7e4ea924254821ff9d6081277d
MD5 0b702a3cbfc3d87e724d01b7e9f29dfd
SHA1 59e8bd570b392734bd0b93dd8e891873babc76c4
SHA512 21aba1e710681f7f51dd4f31c02b58211b6098b9939542de85f5a38504b4ab75cb0cb02a94ffab9e82bf531618bf83de31fbd9a74fe03abd240ba8c66906f890
SSDEEP 3072:dXOjjia9LsOUI7nhGJle/VtHNMzOiexBH4uo61klISWmQKcVGGfarW4ivMld8:Z2d9L73nheettHNBp7ZkezmaVfaQq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 271KB

file.exe

IMPHASH 99b7145610da9b442c2058e4f845369b
SHA256 07d09cd8e21489a6940e1adae30b355cb8859d7e4ea924254821ff9d6081277d
MD5 0b702a3cbfc3d87e724d01b7e9f29dfd
SHA1 59e8bd570b392734bd0b93dd8e891873babc76c4
SHA512 21aba1e710681f7f51dd4f31c02b58211b6098b9939542de85f5a38504b4ab75cb0cb02a94ffab9e82bf531618bf83de31fbd9a74fe03abd240ba8c66906f890
SSDEEP 3072:dXOjjia9LsOUI7nhGJle/VtHNMzOiexBH4uo61klISWmQKcVGGfarW4ivMld8:Z2d9L73nheettHNBp7ZkezmaVfaQq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26735

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetStringTypeA WriteConsoleOutputCharacterA OpenJobObjectA GetCommState WaitNamedPipeA CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW LCMapStringA GetConsoleAliasesW SetProcessAffinityMask GetLastError GetProcAddress VirtualAlloc CopyFileA SetComputerNameA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetProfileIntA GetSystemDefaultLangID RaiseException Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

user32

ClientToScreen

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts

Sharing