file[.]exe | Triage™

General

Target
file.exe
Size 240KB
Sample221117-e1yg1shf6x
SHA256 9cb5df896d9afa78c56efcefbaf18d04f638471ea0151ae6af04d9ce630cf642
MD5 1925fc12b87dda8ebd62a6f03d3c008c
SHA1 7016db56410e14641425f3cd9853c81a1c757c0b
SHA512 fb4484a103fa2e5cbd83aaedd69179353e9bc2e599d67e827e7c99d2d8ac8c3b3daa80c8c7dcf78ae5653152acfd9c7c9723fca4d64536ae61f0feced95d6e57
SSDEEP 6144:py3lLn7GSboUQlR08KHXHn/IKx1BrXxGb:p8riSbotlR08eXH/IKTNXA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 240KB

file.exe

IMPHASH 3635066ced5785b53b09a5114f4a742f
SHA256 9cb5df896d9afa78c56efcefbaf18d04f638471ea0151ae6af04d9ce630cf642
MD5 1925fc12b87dda8ebd62a6f03d3c008c
SHA1 7016db56410e14641425f3cd9853c81a1c757c0b
SHA512 fb4484a103fa2e5cbd83aaedd69179353e9bc2e599d67e827e7c99d2d8ac8c3b3daa80c8c7dcf78ae5653152acfd9c7c9723fca4d64536ae61f0feced95d6e57
SSDEEP 6144:py3lLn7GSboUQlR08KHXHn/IKx1BrXxGb:p8riSbotlR08eXH/IKTNXA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27770

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetPrivateProfileIntA SetFileShortNameW LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA EnumSystemCodePagesW LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA GetProcessAffinityMask FindNextFileW GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringW GetLastError GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing