file[.]exe | Triage™

General

Target
file.exe
Size 231KB
Sample221116-red8gabf66
SHA256 07423bb3875a35390fdd0653a49c1aa16397664db199c5bd8e348cb2d29a14b9
MD5 d9fa0cf50ddc7075f931a83faa81546a
SHA1 f117097518c720de4f66ceee859633ad755e0d18
SHA512 29a70b58bf39ea16bcc36c6088afdb4d65f3a1c7f5e92867282a9fa85deaeacf199da570be1fad7873c340fde224923f07eca14942dca9c99fc8223077badb77
SSDEEP 3072:7XOUM63Lg7fzKStW72ZhHbfTpzuuDlEkLyFBwEaVLPpbGqmNciLRBCUisB:Tu63LgSStbZBfTpDm2E0rNRmNciDCW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 231KB

file.exe

IMPHASH 89e7552a7bf49c6b2882e1ebfa72cd34
SHA256 07423bb3875a35390fdd0653a49c1aa16397664db199c5bd8e348cb2d29a14b9
MD5 d9fa0cf50ddc7075f931a83faa81546a
SHA1 f117097518c720de4f66ceee859633ad755e0d18
SHA512 29a70b58bf39ea16bcc36c6088afdb4d65f3a1c7f5e92867282a9fa85deaeacf199da570be1fad7873c340fde224923f07eca14942dca9c99fc8223077badb77
SSDEEP 3072:7XOUM63Lg7fzKStW72ZhHbfTpzuuDlEkLyFBwEaVLPpbGqmNciLRBCUisB:Tu63LgSStbZBfTpDm2E0rNRmNciDCW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26847

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW GetConsoleAliasesW SetProcessAffinityMask GetProcAddress VirtualAlloc CopyFileA LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetLastError GetSystemDefaultLangID Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing