file[.]exe | Triage™

General

Target
file.exe
Size 279KB
Sample221117-cs1ajade49
SHA256 a4323a2d24816e0f1d2b7fe73921b590ec9166fc8407d6d0f77639b19e9544ef
MD5 09e1cc59772a543dbeed55673d5e28d3
SHA1 889b34e1e77f53d358e64ce7d71c14bb26959834
SHA512 0ce6ff03d0fa4e40f7338c9ffa89578dc27352248f08e7d2e18bf34cb6455622fbf7f84900f63f30ffcee02baac7bfc652b46f72fbcf005c79b70aabf834993f
SSDEEP 6144:h9PLT+tnrWUeqb1YDysZcfodL4uvOf76jYx+GU4y1xGb:hFPSnrWosZhZJvOfOkcA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 279KB

file.exe

IMPHASH 3635066ced5785b53b09a5114f4a742f
SHA256 a4323a2d24816e0f1d2b7fe73921b590ec9166fc8407d6d0f77639b19e9544ef
MD5 09e1cc59772a543dbeed55673d5e28d3
SHA1 889b34e1e77f53d358e64ce7d71c14bb26959834
SHA512 0ce6ff03d0fa4e40f7338c9ffa89578dc27352248f08e7d2e18bf34cb6455622fbf7f84900f63f30ffcee02baac7bfc652b46f72fbcf005c79b70aabf834993f
SSDEEP 6144:h9PLT+tnrWUeqb1YDysZcfodL4uvOf76jYx+GU4y1xGb:hFPSnrWosZhZJvOfOkcA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27770

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetPrivateProfileIntA SetFileShortNameW LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA EnumSystemCodePagesW LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA GetProcessAffinityMask FindNextFileW GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringW GetLastError GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing