file[.]exe | Triage™

General

Target
file.exe
Size 379KB
Sample221204-de79naeg2v
SHA256 b8a42316cab940e22d1ac63f467b40debcab8f0ddb91f42e7d255f5bc277eff4
MD5 9010c6b84f7cbdbde08b3b57fa0695a6
SHA1 6314fb6de53488904c017c079a4d5acb671897d2
SHA512 5fdda4eb4ef744b19aea643cb4717d8a8e1481a282c5233fb5a2b6147e29add7a8d01c63322a2b5ef5a1d8d483eda9ca94e388eb096e042f86024710cd7d575f
SSDEEP 6144:i9o9SX0l/TMeziIbaQ2jcDIS8nMW2Rqn5SgBWY:i9o9U0VTpziIej43SMW35Sg0Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 379KB

file.exe

IMPHASH 232a88a68cd6cc5c1194cb5ecddf784e
SHA256 b8a42316cab940e22d1ac63f467b40debcab8f0ddb91f42e7d255f5bc277eff4
MD5 9010c6b84f7cbdbde08b3b57fa0695a6
SHA1 6314fb6de53488904c017c079a4d5acb671897d2
SHA512 5fdda4eb4ef744b19aea643cb4717d8a8e1481a282c5233fb5a2b6147e29add7a8d01c63322a2b5ef5a1d8d483eda9ca94e388eb096e042f86024710cd7d575f
SSDEEP 6144:i9o9SX0l/TMeziIbaQ2jcDIS8nMW2Rqn5SgBWY:i9o9U0VTpziIej43SMW35Sg0Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21126

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetFullPathNameW GetVolumePathNameA SetThreadPriority GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetBinaryTypeW GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP CloseHandle CreateFileA

advapi32

RegQueryInfoKeyW

Sharing