file[.]exe | Triage™

General

Target
file.exe
Size 923KB
Sample221116-tf7yaaca29
SHA256 1ae013d4e99c5bc1b818e14963f275caada1f71fa0186834dc7680124aea8b8d
MD5 964da73180a995495797e2107c4b936a
SHA1 d941ec8cb8d06c07f77d1c5318abeda5f23ab730
SHA512 6252c809c8aefa1ef8c6742a3099970c6af178a878eba3dd9ef557df62ce6903b9ccf00be534d2b9c1f9b8ffdb4cceed8cc6e5b257b2abe7efcd0a155fe7efa7
SSDEEP 3072:RSYXGw6CPL8ps6U3vUAlBlbusYkt2OET23p8zZbni72qlGqG111JvXy0RhPZKwCt:RSYXecod0CT632hi72qlS11dXY7H
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 923KB

file.exe

IMPHASH 1818e86e01a8cce8b1f337b9457805bd
SHA256 1ae013d4e99c5bc1b818e14963f275caada1f71fa0186834dc7680124aea8b8d
MD5 964da73180a995495797e2107c4b936a
SHA1 d941ec8cb8d06c07f77d1c5318abeda5f23ab730
SHA512 6252c809c8aefa1ef8c6742a3099970c6af178a878eba3dd9ef557df62ce6903b9ccf00be534d2b9c1f9b8ffdb4cceed8cc6e5b257b2abe7efcd0a155fe7efa7
SSDEEP 3072:RSYXGw6CPL8ps6U3vUAlBlbusYkt2OET23p8zZbni72qlGqG111JvXy0RhPZKwCt:RSYXecod0CT632hi72qlS11dXY7H
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14437

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetEnvironmentVariableW MultiByteToWideChar GetLastError LoadLibraryA lstrcatW RaiseException DecodePointer GetProcAddress DeleteCriticalSection CreateFileW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle GetProcessHeap SetEnvironmentVariableW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection WideCharToMultiByte LocalFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EncodePointer RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetACP HeapFree HeapAlloc CompareStringW LCMapStringW GetFileType HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW

user32

ShowWindow FindWindowA wsprintfW

oleaut32

SafeArrayGetDim VariantInit SafeArrayGetUBound SafeArrayGetLBound SysFreeString SysAllocString VariantCopy SysAllocStringLen SafeArrayAccessData VariantClear GetErrorInfo

Sharing