file[.]exe | Triage™

General

Target
file.exe
Size 336KB
Sample221203-2etm9sfa8s
SHA256 7ebf75397b289571aeb79ba79966b577adf79375e8ec31c31ce18037e7bc8646
MD5 6d6cda36668f5c560b99806b66d032a6
SHA1 f51d2ec852ddbc4ae17aa6bc3173d0171667af15
SHA512 cfed4151fcc6911b8e56d026a70d9b72e9958932d9828306e089c0448033bbdcc77600398c66f153cf138fa1383c9acc45ec67ef1455e1038f15baffd24ac0b1
SSDEEP 3072:PwBNXChTTY95XmTfaI0/oHdOETVQtEnQqkJ4LGnWNTC6NRMHnlXWmxLhhppHYDrE:gWkH2fZdOE5QtYa1nMW2RqnBLhrY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 336KB

file.exe

IMPHASH fabdd81d465096fc2ac5ac1410a7de25
SHA256 7ebf75397b289571aeb79ba79966b577adf79375e8ec31c31ce18037e7bc8646
MD5 6d6cda36668f5c560b99806b66d032a6
SHA1 f51d2ec852ddbc4ae17aa6bc3173d0171667af15
SHA512 cfed4151fcc6911b8e56d026a70d9b72e9958932d9828306e089c0448033bbdcc77600398c66f153cf138fa1383c9acc45ec67ef1455e1038f15baffd24ac0b1
SSDEEP 3072:PwBNXChTTY95XmTfaI0/oHdOETVQtEnQqkJ4LGnWNTC6NRMHnlXWmxLhhppHYDrE:gWkH2fZdOE5QtYa1nMW2RqnBLhrY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21416

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetBinaryTypeW GetFullPathNameW SetThreadPriority GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode RtlUnwind LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP CloseHandle CreateFileA

advapi32

RegQueryInfoKeyW

Sharing