file[.]exe | Triage™

General

Target
file.exe
Size 342KB
Sample221204-ss2rcsbd82
SHA256 dc854c47220564311f10c00a6405b40231223fa6eb11cae7823b668568fde0cd
MD5 349a87fe8bdd18c533682a26b4e32c50
SHA1 b998ae423e45571645bffec929911ea530e5d673
SHA512 e66f6c1039afd2466e1d11a9ccbf4dbc41532a1f35909c172c03f7531def67444a85eca376527117ccb3f6c32a1070205680bf08af3effa9239fdf97474c4087
SSDEEP 6144:Zubi23w6kWPQckUV8fzymlglVgUKPG1PZ:Zubi2oWPQjUufzyWglVlKPG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 342KB

file.exe

IMPHASH bba32367279942df914c42050a9be388
SHA256 dc854c47220564311f10c00a6405b40231223fa6eb11cae7823b668568fde0cd
MD5 349a87fe8bdd18c533682a26b4e32c50
SHA1 b998ae423e45571645bffec929911ea530e5d673
SHA512 e66f6c1039afd2466e1d11a9ccbf4dbc41532a1f35909c172c03f7531def67444a85eca376527117ccb3f6c32a1070205680bf08af3effa9239fdf97474c4087
SSDEEP 6144:Zubi23w6kWPQckUV8fzymlglVgUKPG1PZ:Zubi2oWPQjUufzyWglVlKPG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21816

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetCriticalSectionSpinCount lstrlenA GetProfileIntW lstrcpynA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetBinaryTypeW GetVolumePathNameA FillConsoleOutputCharacterA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GetVolumeNameForVolumeMountPointW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA SetThreadPriority GetFullPathNameW HeapFree MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle HeapSize CreateFileA CloseHandle

advapi32

RegQueryInfoKeyW

Sharing