file[.]exe | Triage™

General

Target
file.exe
Size 231KB
Sample221116-txhpqaca69
SHA256 b9c7553bd980e296bf9727b9b256fda156ed660a9b6451e8d661ca99d46a0933
MD5 2f0ce91352411220c04afd99c784cd68
SHA1 898cc190331413c58416c79dbe9181207a5983d4
SHA512 9fea312c09bc600e81c47facc3b43a4c927f4673d59d056daccd3e1ce1ff5b1edf541f8d3977d35ec8054a5afe2c7a124823caa5aa19342b6a0b3c7019fdc439
SSDEEP 3072:MXOEJUfbL/xjlm1D7yynIlm81B/tBFeymcEy4MSSpDSikJV6Sresfq:IobL/3m1D7f2mMJzzh4MrSJVNesf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 231KB

file.exe

IMPHASH 9d3c46448655d82ee7e7b980d48b2aab
SHA256 b9c7553bd980e296bf9727b9b256fda156ed660a9b6451e8d661ca99d46a0933
MD5 2f0ce91352411220c04afd99c784cd68
SHA1 898cc190331413c58416c79dbe9181207a5983d4
SHA512 9fea312c09bc600e81c47facc3b43a4c927f4673d59d056daccd3e1ce1ff5b1edf541f8d3977d35ec8054a5afe2c7a124823caa5aa19342b6a0b3c7019fdc439
SSDEEP 3072:MXOEJUfbL/xjlm1D7yynIlm81B/tBFeymcEy4MSSpDSikJV6Sresfq:IobL/3m1D7f2mMJzzh4MrSJVNesf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27626

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW GetConsoleAliasesW SetProcessAffinityMask GetProcAddress VirtualAlloc CopyFileA LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetLastError GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing