file[.]exe | Triage™

General

Target
file.exe
Size 420KB
Sample221207-d3mb4abf29
SHA256 cec4b37360c07b3c189708d0feaae094ecb2f3e3d10bdbca93273e3a965f16ab
MD5 a6a58a7daa02c1c2075848e47e66bc2d
SHA1 bb8a565f5e635cfb899a6c5f3aeb096a2fa96185
SHA512 2fe6974fe14c2b221e7dba8360a6d922569e659eeb82d3f33a49d92a786473068fac74b68a303e0fe17e066d635c6b845afc138d5f76bdf7de5669ba239715de
SSDEEP 6144:zrJILqAs0H92SF9eKlFFo7vnD3caIz3qWcoBlCa4eaVe:zueAs0HMfgFK7vnD3cjZcWC7e3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 420KB

file.exe

IMPHASH a56934040bb7998eb09f75c554f918ec
SHA256 cec4b37360c07b3c189708d0feaae094ecb2f3e3d10bdbca93273e3a965f16ab
MD5 a6a58a7daa02c1c2075848e47e66bc2d
SHA1 bb8a565f5e635cfb899a6c5f3aeb096a2fa96185
SHA512 2fe6974fe14c2b221e7dba8360a6d922569e659eeb82d3f33a49d92a786473068fac74b68a303e0fe17e066d635c6b845afc138d5f76bdf7de5669ba239715de
SSDEEP 6144:zrJILqAs0H92SF9eKlFFo7vnD3caIz3qWcoBlCa4eaVe:zueAs0HMfgFK7vnD3cjZcWC7e3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29190

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle LCMapStringW GetConsoleAliasesW GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing