file[.]exe | Triage™

General

Target
file.exe
Size 421KB
Sample221207-ak2ghsbf5s
SHA256 1f142c5834288f15e8d6ec3fd125bcd17cc8d58097e5949f1f8a618ae08fcfc6
MD5 54937a7a6cccaedd798a60b888d2c7db
SHA1 f6acbc84d0cc476eb1043f0dde928415b43f6a43
SHA512 baea8a38cc36fc03da9a6d77a9329c8d5ed7b4245cc1bb4fcbc14fc423eebe92bec675fdc39507e97f586762878a6aa3540728a6c479b0c74b5900f74999f759
SSDEEP 6144:DIuULIuowfcncOkEIsDO43xcbafNTyqWcoBlCWmeoM4aVe:DYkuBfchkEHDTcbUycWCWB143
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 421KB

file.exe

IMPHASH a56934040bb7998eb09f75c554f918ec
SHA256 1f142c5834288f15e8d6ec3fd125bcd17cc8d58097e5949f1f8a618ae08fcfc6
MD5 54937a7a6cccaedd798a60b888d2c7db
SHA1 f6acbc84d0cc476eb1043f0dde928415b43f6a43
SHA512 baea8a38cc36fc03da9a6d77a9329c8d5ed7b4245cc1bb4fcbc14fc423eebe92bec675fdc39507e97f586762878a6aa3540728a6c479b0c74b5900f74999f759
SSDEEP 6144:DIuULIuowfcncOkEIsDO43xcbafNTyqWcoBlCWmeoM4aVe:DYkuBfchkEHDTcbUycWCWB143
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29174

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle LCMapStringW GetConsoleAliasesW GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing