file[.]exe | Triage™

General

Target
file.exe
Size 351KB
Sample221203-xsmdwsbf8v
SHA256 b6341c0052b0ea2a05bf000d623edadd6ad1b296e5f9d4605f57d1b98f53c32a
MD5 eda2e0b7299d35736c59b15329b7dd7c
SHA1 3584366c4036e5b1904d4406d45c28b59773cd5c
SHA512 d4d7c55896fbf89d636c53ad8c354f8fb895f204d47bf8969cbd2872c845b6bc16e3fdcc66fef80ec3543ec4fa8ab0316ec69eb9f3cb294a28a13600bcfe2c4f
SSDEEP 3072:7dyysZbayI5Am/fhR+eQXe/OVTEN/U6ZnfDPZGe6n+5GnWNTC6NRMHnlXpgNB8ON:tsday5mLsbT0ZfIFnMW2RqnHgYOeDAY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 351KB

file.exe

IMPHASH 2ecba4f94e8f44b19ea360cb81da7876
SHA256 b6341c0052b0ea2a05bf000d623edadd6ad1b296e5f9d4605f57d1b98f53c32a
MD5 eda2e0b7299d35736c59b15329b7dd7c
SHA1 3584366c4036e5b1904d4406d45c28b59773cd5c
SHA512 d4d7c55896fbf89d636c53ad8c354f8fb895f204d47bf8969cbd2872c845b6bc16e3fdcc66fef80ec3543ec4fa8ab0316ec69eb9f3cb294a28a13600bcfe2c4f
SSDEEP 3072:7dyysZbayI5Am/fhR+eQXe/OVTEN/U6ZnfDPZGe6n+5GnWNTC6NRMHnlXpgNB8ON:tsday5mLsbT0ZfIFnMW2RqnHgYOeDAY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo WriteConsoleW GetBinaryTypeW FillConsoleOutputCharacterA SetThreadPriority GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetFullPathNameW HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

RegQueryInfoKeyW

Sharing