file[.]exe | Triage™

General

Target
file.exe
Size 341KB
Sample221204-thxkbshd3x
SHA256 e11796b9d679364967df2aaf6f7f96b71e6c6f8090bcc2d4086cfce5f8e70b8f
MD5 fd3b279868c450ea0d9c7f7663e12693
SHA1 426819cca39893b91b6f4a04ad476b41a88c358b
SHA512 0572fe9b55578b5b90ace39f0b7483249b3f3195ff10ac305314f9ec1c443206ee8eb248adcf01cacc4990c09ebbdd08c2dfe2e87f78315013e829da9949ab1a
SSDEEP 6144:541i1y0FtEj0euJ0/+ymlgltoCDEAG1PF:541i11cA5J02yWgltJG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 341KB

file.exe

IMPHASH bba32367279942df914c42050a9be388
SHA256 e11796b9d679364967df2aaf6f7f96b71e6c6f8090bcc2d4086cfce5f8e70b8f
MD5 fd3b279868c450ea0d9c7f7663e12693
SHA1 426819cca39893b91b6f4a04ad476b41a88c358b
SHA512 0572fe9b55578b5b90ace39f0b7483249b3f3195ff10ac305314f9ec1c443206ee8eb248adcf01cacc4990c09ebbdd08c2dfe2e87f78315013e829da9949ab1a
SSDEEP 6144:541i1y0FtEj0euJ0/+ymlgltoCDEAG1PF:541i11cA5J02yWgltJG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21816

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetCriticalSectionSpinCount lstrlenA GetProfileIntW lstrcpynA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetBinaryTypeW GetVolumePathNameA FillConsoleOutputCharacterA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GetVolumeNameForVolumeMountPointW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA SetThreadPriority GetFullPathNameW HeapFree MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle HeapSize CreateFileA CloseHandle

advapi32

RegQueryInfoKeyW

Sharing