file[.]exe | Triage™

General

Target
file.exe
Size 351KB
Sample221203-zdkmvsdb25
SHA256 2bbe241373086ce764a8bf4dcf15e4722c43bf712fad7fc9aa7458c5a6b9efe3
MD5 399b056476739d333b3ba28c3b7c1552
SHA1 819b1e656c28c34fb0b7e1aad5fdd55b4f2dad00
SHA512 35d54243a2cb4c37d8ce6218b750345c17a80619fcd1bbebf276b7dc3debdc79de2abf495c7c8b279f8dad9e3c01c0e05e6eac5875bc646eaa662639ad7b54cb
SSDEEP 6144:HS0V/tYzaVRwXyWv6Tk1TOnMW2RqnIFfPqY8:Hzl2E1Tk1EMW3IFfPqY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 351KB

file.exe

IMPHASH 558d571f1ba0471f806ada9634257523
SHA256 2bbe241373086ce764a8bf4dcf15e4722c43bf712fad7fc9aa7458c5a6b9efe3
MD5 399b056476739d333b3ba28c3b7c1552
SHA1 819b1e656c28c34fb0b7e1aad5fdd55b4f2dad00
SHA512 35d54243a2cb4c37d8ce6218b750345c17a80619fcd1bbebf276b7dc3debdc79de2abf495c7c8b279f8dad9e3c01c0e05e6eac5875bc646eaa662639ad7b54cb
SSDEEP 6144:HS0V/tYzaVRwXyWv6Tk1TOnMW2RqnIFfPqY8:Hzl2E1Tk1EMW3IFfPqY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24560

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA WriteConsoleW GetBinaryTypeW FillConsoleOutputCharacterA SetThreadPriority GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetFullPathNameW HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

RegQueryInfoKeyW

Sharing