file[.]exe | Triage™

General

Target
file.exe
Size 421KB
Sample221207-d3mb4abf32
SHA256 0a4174a69b0e01fefc64d10691910cfc94ec7b664701d7ebe2e80a8600d20a0c
MD5 ae0a426a3ae98abe0ec1b1d00bf35f44
SHA1 a3fd2e9ccf885206d3013f420da71c764dae6f04
SHA512 a2633fbf32e1a0b4dac8f5be89d63d3fde9e425cf08713c7289515c67bec3c893a0031f736e0e040f1aafcb6ee358c01ca32848f45bfdb28606631e90c2a013d
SSDEEP 6144:2yGULW8BCGg5xBlEaQxbqK2bK9gDf/00r6wGAsqWcoBlCgba1QkaVe:2yq8BCGKxB2/JK00mcWCge1Qk3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 421KB

file.exe

IMPHASH a56934040bb7998eb09f75c554f918ec
SHA256 0a4174a69b0e01fefc64d10691910cfc94ec7b664701d7ebe2e80a8600d20a0c
MD5 ae0a426a3ae98abe0ec1b1d00bf35f44
SHA1 a3fd2e9ccf885206d3013f420da71c764dae6f04
SHA512 a2633fbf32e1a0b4dac8f5be89d63d3fde9e425cf08713c7289515c67bec3c893a0031f736e0e040f1aafcb6ee358c01ca32848f45bfdb28606631e90c2a013d
SSDEEP 6144:2yGULW8BCGg5xBlEaQxbqK2bK9gDf/00r6wGAsqWcoBlCgba1QkaVe:2yq8BCGKxB2/JK00mcWCge1Qk3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29174

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW GetTickCount WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesA WriteConsoleW SetThreadPriority DisconnectNamedPipe CreateJobObjectA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle LCMapStringW GetConsoleAliasesW GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing