file[.]exe | Triage™

General

Target
file.exe
Size 350KB
Sample221203-w129msdg96
SHA256 7e4ed6746e495e2265d594d7799f78bb947b8e035502ea5214f4f8b078dc2c2a
MD5 e2d0350e74735f3198dadd352ea95992
SHA1 fe2c54187ed962fed100e2b2749c2ef2576c3788
SHA512 3eca0a2091c635594fdb17fa8af1b2d97bcf2fa2c9ba18288427dcac562140b033477e2fe4afa90367f44ab0fd1526518f20141a035db4a3c8498dad23643cdc
SSDEEP 3072:YMYjLPN+mI5AwiRxp3CHK33NKPLRgbk1cSaJuYGnWNTC6NRMHnlXVuc3B2GAQHYg:wLl+m5lwZtAueJ2nMW2RqnN3BM0Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 350KB

file.exe

IMPHASH 2ecba4f94e8f44b19ea360cb81da7876
SHA256 7e4ed6746e495e2265d594d7799f78bb947b8e035502ea5214f4f8b078dc2c2a
MD5 e2d0350e74735f3198dadd352ea95992
SHA1 fe2c54187ed962fed100e2b2749c2ef2576c3788
SHA512 3eca0a2091c635594fdb17fa8af1b2d97bcf2fa2c9ba18288427dcac562140b033477e2fe4afa90367f44ab0fd1526518f20141a035db4a3c8498dad23643cdc
SSDEEP 3072:YMYjLPN+mI5AwiRxp3CHK33NKPLRgbk1cSaJuYGnWNTC6NRMHnlXVuc3B2GAQHYg:wLl+m5lwZtAueJ2nMW2RqnN3BM0Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo WriteConsoleW GetBinaryTypeW FillConsoleOutputCharacterA SetThreadPriority GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetFullPathNameW HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

RegQueryInfoKeyW

Sharing