file[.]exe | Triage™

General

Target
file.exe
Size 381KB
Sample221207-blm6ysec4z
SHA256 d7cf9e9a1feccee42ca13bbe7255ead0923253d2aba5b762cfa6d76d6dcb7cdc
MD5 675ffe5e374fd5d72b84fb258d5cb63e
SHA1 9e17fe0ac7a3657406165c8f2b5fd3bd66574e5c
SHA512 02f962803122cf45e5086db44761c20ef7001c94589f80e9cb1693f6feb0c20d54aaeea17a96cd0c359cd9b7799849d1bc39a1c3ca3dc58adaf24929c2964e0b
SSDEEP 6144:1bJULAZ7SGbd9N66Hz2whWVqvWcoBlCB1yEhaVe:1CkZ7SGbdHLqL9cWCB1l3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 381KB

file.exe

IMPHASH a56934040bb7998eb09f75c554f918ec
SHA256 d7cf9e9a1feccee42ca13bbe7255ead0923253d2aba5b762cfa6d76d6dcb7cdc
MD5 675ffe5e374fd5d72b84fb258d5cb63e
SHA1 9e17fe0ac7a3657406165c8f2b5fd3bd66574e5c
SHA512 02f962803122cf45e5086db44761c20ef7001c94589f80e9cb1693f6feb0c20d54aaeea17a96cd0c359cd9b7799849d1bc39a1c3ca3dc58adaf24929c2964e0b
SSDEEP 6144:1bJULAZ7SGbd9N66Hz2whWVqvWcoBlCB1yEhaVe:1CkZ7SGbdHLqL9cWCB1l3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29174

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle LCMapStringW GetConsoleAliasesW GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing