file[.]exe | Triage™

General

Target
file.exe
Size 379KB
Sample221204-caldnabe3x
SHA256 1f2ef0df377063c9bded2935fe6f3d767a58b53673d5698ac5bdd5cd5acbb5d0
MD5 014c9f06c7d3f045553c0f4cd437e333
SHA1 b53d5485aa74e39e5c9f67b4a6d337907b6d16af
SHA512 c7716ccf741ee1d63e1a300002c74d8463f7e53e84b78ff6afebf268ad88419b50817eb77c7bb539ecd9da2e6757ea566509bf4c388fd8833936305d1cb05f2b
SSDEEP 6144:1Ov+o+SqTCNQlBhCAm8YAtr7NEnMW2Rqn9l1yyY:1Ov+o+5TCNCBMANtwMW39lBY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 379KB

file.exe

IMPHASH 232a88a68cd6cc5c1194cb5ecddf784e
SHA256 1f2ef0df377063c9bded2935fe6f3d767a58b53673d5698ac5bdd5cd5acbb5d0
MD5 014c9f06c7d3f045553c0f4cd437e333
SHA1 b53d5485aa74e39e5c9f67b4a6d337907b6d16af
SHA512 c7716ccf741ee1d63e1a300002c74d8463f7e53e84b78ff6afebf268ad88419b50817eb77c7bb539ecd9da2e6757ea566509bf4c388fd8833936305d1cb05f2b
SSDEEP 6144:1Ov+o+SqTCNQlBhCAm8YAtr7NEnMW2Rqn9l1yyY:1Ov+o+5TCNCBMANtwMW39lBY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21126

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetFullPathNameW GetVolumePathNameA SetThreadPriority GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetBinaryTypeW GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP CloseHandle CreateFileA

advapi32

RegQueryInfoKeyW

Sharing