file[.]exe | Triage™

General

Target
file.exe
Size 729KB
Sample221202-x8yrvsbc6s
SHA256 c5eed936386e21336272474705f5c6be5fd7fce784ffd64c80fc3b89d2055b77
MD5 e47fa2904bd7449121448126cbf15446
SHA1 85f867c8d63daefaea29f722f7422b0277534674
SHA512 454e4a445b7f7d36d4dad69abeaf0d31e800897031079103ddaac99ef3ba17b5a19ebb128b1649670639e029858d36b73358b982bb93d9a65460397bf408855c
SSDEEP 12288:XrtT5o8+RpLr6q72xvwk8JrRImLec/VqT+kCW5n0ZLLV8HflQSHOvuaFuCDF55Ok:7lz+RpLr6q7Qvwk8J1te75n0F58HfuJp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 729KB

file.exe

IMPHASH 2770ba155f4d22f5f30a1a2fc85b15b1
SHA256 c5eed936386e21336272474705f5c6be5fd7fce784ffd64c80fc3b89d2055b77
MD5 e47fa2904bd7449121448126cbf15446
SHA1 85f867c8d63daefaea29f722f7422b0277534674
SHA512 454e4a445b7f7d36d4dad69abeaf0d31e800897031079103ddaac99ef3ba17b5a19ebb128b1649670639e029858d36b73358b982bb93d9a65460397bf408855c
SSDEEP 12288:XrtT5o8+RpLr6q72xvwk8JrRImLec/VqT+kCW5n0ZLLV8HflQSHOvuaFuCDF55Ok:7lz+RpLr6q7Qvwk8J1te75n0F58HfuJp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

161102

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect MultiByteToWideChar FormatMessageA GetStringTypeW WideCharToMultiByte GetCurrentThreadId CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetExitCodeThread GetNativeSystemInfo EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LocalFree LCMapStringEx InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryEnterCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW QueryPerformanceCounter QueryPerformanceFrequency SetFileInformationByHandle FlsAlloc FlsGetValue FlsSetValue FlsFree InitOnceExecuteOnce CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetProcAddress GetFileInformationByHandleEx CreateSymbolicLinkW GetLocaleInfoEx CompareStringEx GetCPInfo GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetCurrentThread GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType SetConsoleCtrlHandler FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing