file[.]exe | Triage™

General

Target
file.exe
Size 342KB
Sample221204-st7c8sbe64
SHA256 ba7c932a43a8cc787199a1c222a6f3964fa08bbaff667070d38eb15cbdfa0732
MD5 0367bba04c925a17c2afc1b3c51f4d1e
SHA1 f32daa498cfaf492fec026d8691863a62889c51e
SHA512 59a980b1631309fd1571c49711e54d00d98c5f29523df30895ae145369791e911243c6905be9d8b1905720e00c26cc199da1840e6057bb3eeb9d74d4e3b0dea4
SSDEEP 6144:NEOirah/aK35KQ//pZAWxxGymlglYEG1PZ:NEOi+1aKkSDxxGyWglfG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 342KB

file.exe

IMPHASH bba32367279942df914c42050a9be388
SHA256 ba7c932a43a8cc787199a1c222a6f3964fa08bbaff667070d38eb15cbdfa0732
MD5 0367bba04c925a17c2afc1b3c51f4d1e
SHA1 f32daa498cfaf492fec026d8691863a62889c51e
SHA512 59a980b1631309fd1571c49711e54d00d98c5f29523df30895ae145369791e911243c6905be9d8b1905720e00c26cc199da1840e6057bb3eeb9d74d4e3b0dea4
SSDEEP 6144:NEOirah/aK35KQ//pZAWxxGymlglYEG1PZ:NEOi+1aKkSDxxGyWglfG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21816

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetCriticalSectionSpinCount lstrlenA GetProfileIntW lstrcpynA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetBinaryTypeW GetVolumePathNameA FillConsoleOutputCharacterA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GetVolumeNameForVolumeMountPointW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA SetThreadPriority GetFullPathNameW HeapFree MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle HeapSize CreateFileA CloseHandle

advapi32

RegQueryInfoKeyW

Sharing