file[.]exe | Triage™

General

Target
file.exe
Size 341KB
Sample221204-b9f3jsfe94
SHA256 1edd8db235cabec2d9fe4e5aca0bb9ad59477132df1087e9fc8032432e4c576d
MD5 dd0d8d051b3e5527a118ddc0c8be9d26
SHA1 29b0f5e3b70f7d8793e24eaa527d09ee44dfff26
SHA512 012189654bbe5147a91763006085b4514146f904f27935979c95092fa4e7f702b02a49dc516cc7ab0760131e9426cfda84ba122c3a03ca34edabc722ed24c8db
SSDEEP 6144:tXoOB1CmngHNwRrxPoinXQTEnMW2Rqn2RnY:tXoOrCigHNwnginXQTKMW3OY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 341KB

file.exe

IMPHASH 232a88a68cd6cc5c1194cb5ecddf784e
SHA256 1edd8db235cabec2d9fe4e5aca0bb9ad59477132df1087e9fc8032432e4c576d
MD5 dd0d8d051b3e5527a118ddc0c8be9d26
SHA1 29b0f5e3b70f7d8793e24eaa527d09ee44dfff26
SHA512 012189654bbe5147a91763006085b4514146f904f27935979c95092fa4e7f702b02a49dc516cc7ab0760131e9426cfda84ba122c3a03ca34edabc722ed24c8db
SSDEEP 6144:tXoOB1CmngHNwRrxPoinXQTEnMW2Rqn2RnY:tXoOrCigHNwnginXQTKMW3OY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21126

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetFullPathNameW GetVolumePathNameA SetThreadPriority GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetBinaryTypeW GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP CloseHandle CreateFileA

advapi32

RegQueryInfoKeyW

Sharing