file[.]exe | Triage™

General

Target
file.exe
Size 421KB
Sample221209-gtrf8sfd9s
SHA256 5e535fca8f9a9ffc8f15d6cc24ef479929f40c802959f788334898e3e074f87a
MD5 5137fba29f813b1304703b9f3a75ec6c
SHA1 5fe53033676b973f45cf7cfe1271d884f63087f2
SHA512 49a1dcb5c7952128a9a06b8884cb4e53e47ee648b82d96b1f950a7900b48d8e0b66322fe034a46130bf32ce952310233c4fec8d63d799a2d5cd7a09a3bbd3dba
SSDEEP 6144:0DvLeiixeodFBsAtkKwGPJ/u0wXhh6K9W9KvSHwtded89kTt:0zSiig2FBsG2G80OIK9W9KvWwuac
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 421KB

file.exe

IMPHASH eeffe9860bc9c6507e24465b9b5239be
SHA256 5e535fca8f9a9ffc8f15d6cc24ef479929f40c802959f788334898e3e074f87a
MD5 5137fba29f813b1304703b9f3a75ec6c
SHA1 5fe53033676b973f45cf7cfe1271d884f63087f2
SHA512 49a1dcb5c7952128a9a06b8884cb4e53e47ee648b82d96b1f950a7900b48d8e0b66322fe034a46130bf32ce952310233c4fec8d63d799a2d5cd7a09a3bbd3dba
SSDEEP 6144:0DvLeiixeodFBsAtkKwGPJ/u0wXhh6K9W9KvSHwtded89kTt:0zSiig2FBsG2G80OIK9W9KvWwuac
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW WaitNamedPipeW TlsSetValue GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesA TransactNamedPipe WriteConsoleW GetVolumePathNameA CreateJobObjectA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW LCMapStringW GetConsoleAliasesW GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing