file[.]exe | Triage™

General

Target
file.exe
Size 390KB
Sample221203-we54eaca47
SHA256 c72b5cca8b8bfda5a2acdaefe19bc967c431b5eaab0ae6f344a4a58b772c87ce
MD5 e2f9b10ebce3a02e8590628b9b127845
SHA1 2c69edef210227567fac4a72ab0f4cb64a33b4d9
SHA512 9689d5bb303e00e7e22e1b3881f5d8b97edf6845c87cfcf1a58c92d69e94893cdcb556f720a6957945b5b3da358b6ce8a10870d9eb2572acb43b23752bb53755
SSDEEP 6144:7G7gs5SqxntDwvPCGY3zp+8eCijWnMW2RqnUTY:7wbsqxtDmPsF8CijAMW3wY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 390KB

file.exe

IMPHASH 2ecba4f94e8f44b19ea360cb81da7876
SHA256 c72b5cca8b8bfda5a2acdaefe19bc967c431b5eaab0ae6f344a4a58b772c87ce
MD5 e2f9b10ebce3a02e8590628b9b127845
SHA1 2c69edef210227567fac4a72ab0f4cb64a33b4d9
SHA512 9689d5bb303e00e7e22e1b3881f5d8b97edf6845c87cfcf1a58c92d69e94893cdcb556f720a6957945b5b3da358b6ce8a10870d9eb2572acb43b23752bb53755
SSDEEP 6144:7G7gs5SqxntDwvPCGY3zp+8eCijWnMW2RqnUTY:7wbsqxtDmPsF8CijAMW3wY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo WriteConsoleW GetBinaryTypeW FillConsoleOutputCharacterA SetThreadPriority GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetFullPathNameW HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

RegQueryInfoKeyW

Sharing