file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221116-lssecsea6w
SHA256 e302530e680780414528ef634f5e9c258ddcedbca098eb079be321650441b1f8
MD5 ebbfea106c5f06b5aaf58167d8db887a
SHA1 0acf42cf083f6b2132cef26fa401b80dce198f58
SHA512 13a5496eb488ef0ea6d1aa8fd9ab591ec8bbf207751ed84097e2639b54a571aa0fe54eb77e4222f7bb5e14b4aeba730edfc1731358b8a22764149ebd2e39b643
SSDEEP 3072:/GXO1ZwuQx5LlUw63qKzYDdU725QXCQHtUFaqlyGmIdY+0aslZ:/uMRo5Llm3qVJUuQX34aem2Y+A
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH b0ece2a263d3cf7672afdc5a35e02148
SHA256 e302530e680780414528ef634f5e9c258ddcedbca098eb079be321650441b1f8
MD5 ebbfea106c5f06b5aaf58167d8db887a
SHA1 0acf42cf083f6b2132cef26fa401b80dce198f58
SHA512 13a5496eb488ef0ea6d1aa8fd9ab591ec8bbf207751ed84097e2639b54a571aa0fe54eb77e4222f7bb5e14b4aeba730edfc1731358b8a22764149ebd2e39b643
SSDEEP 3072:/GXO1ZwuQx5LlUw63qKzYDdU725QXCQHtUFaqlyGmIdY+0aslZ:/uMRo5Llm3qVJUuQX34aem2Y+A
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26735

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW lstrlenA GetStringTypeA OpenJobObjectA GetCommState WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW SetProcessAffinityMask GetLastError GetProcAddress VirtualAlloc CopyFileA LoadLibraryA GetProcessWorkingSetSize LocalAlloc GetModuleHandleA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID RaiseException Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

user32

ClientToScreen

advapi32

BackupEventLogW

winhttp

WinHttpSetTimeouts

Sharing