file[.]exe | Triage™

General

Target
file.exe
Size 279KB
Sample221117-a7g2dsdd64
SHA256 21296d1d8d43c05a13a602ef5dcfc57c3ede4e48759534543c93ef1291457517
MD5 b1ba373c08ca0a81ce6ff088860cabfa
SHA1 d8a179c94f9c3b93fdc231c6b4761c4c6c21d36e
SHA512 7a786e1cf23215ae131fb3121c72f38fb403846f1e4649768127b07dbc8f8754a89f2b1de70a0374b576c9ad4d51d5dee236e82604535391b377a74a66b64ce2
SSDEEP 6144:e3rL9EtBHC83i1OJj2fOM2qnzQgYy7DauOy815KxGb:ebpYBHCnJiqzHh69MA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 279KB

file.exe

IMPHASH 18530b33deef5549fbfeb0377c00b762
SHA256 21296d1d8d43c05a13a602ef5dcfc57c3ede4e48759534543c93ef1291457517
MD5 b1ba373c08ca0a81ce6ff088860cabfa
SHA1 d8a179c94f9c3b93fdc231c6b4761c4c6c21d36e
SHA512 7a786e1cf23215ae131fb3121c72f38fb403846f1e4649768127b07dbc8f8754a89f2b1de70a0374b576c9ad4d51d5dee236e82604535391b377a74a66b64ce2
SSDEEP 6144:e3rL9EtBHC83i1OJj2fOM2qnzQgYy7DauOy815KxGb:ebpYBHCnJiqzHh69MA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27802

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask WriteConsoleOutputCharacterW GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW GetPrivateProfileIntA SetFileShortNameW LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW FillConsoleOutputCharacterA GetLastError GetProcAddress VirtualAlloc CopyFileA EnumSystemCodePagesW LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing