file[.]exe | Triage™

General

Target
file.exe
Size 341KB
Sample221204-gpcsaacc53
SHA256 0b3c2663acabb72ee428e0ece495334959bcb8e2b0e2d21bc90b4160f9fc76cf
MD5 ef5a74cfce9f5bc956703fe5eabd3412
SHA1 ace958546a3d9e47d4e5be07f7b928cd9c8bc8f2
SHA512 9eb8dafddc769eecade6eb71d51ac6bb77b1cde0b000a6f88c6045a4689b318eb6462755684ec33758a250cff1769e6d4102c04e17a446ee96d99c41d87e5c52
SSDEEP 6144:bUo+hU1Yx/kd5RthciXe8nMW2Rqn4gCY:bUo+hq6sTRw0eSMW34gCY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 341KB

file.exe

IMPHASH 232a88a68cd6cc5c1194cb5ecddf784e
SHA256 0b3c2663acabb72ee428e0ece495334959bcb8e2b0e2d21bc90b4160f9fc76cf
MD5 ef5a74cfce9f5bc956703fe5eabd3412
SHA1 ace958546a3d9e47d4e5be07f7b928cd9c8bc8f2
SHA512 9eb8dafddc769eecade6eb71d51ac6bb77b1cde0b000a6f88c6045a4689b318eb6462755684ec33758a250cff1769e6d4102c04e17a446ee96d99c41d87e5c52
SSDEEP 6144:bUo+hU1Yx/kd5RthciXe8nMW2Rqn4gCY:bUo+hq6sTRw0eSMW34gCY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21126

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetFullPathNameW GetVolumePathNameA SetThreadPriority GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetBinaryTypeW GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP CloseHandle CreateFileA

advapi32

RegQueryInfoKeyW

Sharing