file[.]exe | Triage™

General

Target
file.exe
Size 335KB
Sample221203-219avadd55
SHA256 d4d224c2bf90b16864397b769eaffc56833f931be0712d41ecea43754cf848d4
MD5 6026b5d4deda1d0007324b1eb58e23f9
SHA1 a170b2b037efb23181517952a8b36076f49cb23c
SHA512 f2185c526f813cb85f3c25c00700e46aa9339d89bf2001812430d99d991e90f941adcc10645d55f73dcdce330462c2413cf793a53f90d4ae34d1cdc6be8bae01
SSDEEP 3072:NhZjntG+vOe3N/5sCAtOjUJ+yYjV2api6EQGNfjt5SxbcGnWNTC6NRMHnlXASMRU:JD0XiN+PwgJ8ISzETfjt6nMW2RqnHnY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 335KB

file.exe

IMPHASH c13a4ce7a96b7de18434d9eecd3ddb46
SHA256 d4d224c2bf90b16864397b769eaffc56833f931be0712d41ecea43754cf848d4
MD5 6026b5d4deda1d0007324b1eb58e23f9
SHA1 a170b2b037efb23181517952a8b36076f49cb23c
SHA512 f2185c526f813cb85f3c25c00700e46aa9339d89bf2001812430d99d991e90f941adcc10645d55f73dcdce330462c2413cf793a53f90d4ae34d1cdc6be8bae01
SSDEEP 3072:NhZjntG+vOe3N/5sCAtOjUJ+yYjV2api6EQGNfjt5SxbcGnWNTC6NRMHnlXASMRU:JD0XiN+PwgJ8ISzETfjt6nMW2RqnHnY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21399

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA WriteConsoleW GetBinaryTypeW GetFullPathNameW SetThreadPriority GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode RtlUnwind LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP CloseHandle CreateFileA

advapi32

RegQueryInfoKeyW

Sharing