file[.]exe | Triage™

General

Target
file.exe
Size 240KB
Sample221117-b2ymmahd9v
SHA256 4300d6438aa86a80ad904bf5a5d013b5d201e076ceda8edb0441dec73b10bba2
MD5 2ed278bb32bb0dd8ff5961ebdbe2f0d5
SHA1 934bd09cb353fff478cc36e2057dab2bd5ee5170
SHA512 4c75979256013d9291a5c8d1234bca92937f2f1cfd4c02a7a32b0b195ad0bcdb5a68617e05506d2f7aa5f889e82f28a30b9c436a809e68a2af6734d33d8ddda3
SSDEEP 3072:bXOoSXLQwXCt/pmeMMYQQJ5TyIzjrHWh8bj25To0+94zwtMzxGbR:zoXLQt/ceMUknHuKj2d84zkcxGb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 240KB

file.exe

IMPHASH 3635066ced5785b53b09a5114f4a742f
SHA256 4300d6438aa86a80ad904bf5a5d013b5d201e076ceda8edb0441dec73b10bba2
MD5 2ed278bb32bb0dd8ff5961ebdbe2f0d5
SHA1 934bd09cb353fff478cc36e2057dab2bd5ee5170
SHA512 4c75979256013d9291a5c8d1234bca92937f2f1cfd4c02a7a32b0b195ad0bcdb5a68617e05506d2f7aa5f889e82f28a30b9c436a809e68a2af6734d33d8ddda3
SSDEEP 3072:bXOoSXLQwXCt/pmeMMYQQJ5TyIzjrHWh8bj25To0+94zwtMzxGbR:zoXLQt/ceMUknHuKj2d84zkcxGb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27770

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetPrivateProfileIntA SetFileShortNameW LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA EnumSystemCodePagesW LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA GetProcessAffinityMask FindNextFileW GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringW GetLastError GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing