file[.]exe | Triage™

General

Target
file.exe
Size 421KB
Sample221209-hvcvxafe4y
SHA256 1abf0a6c5d4cc2f05a6ae204eeb69102f94d540b0d1c3c8bafc975b91cf23340
MD5 ce58db64b6ae454438cb7eee1a7f13d0
SHA1 3ac20f59b88f8e40363f353127226def5a534add
SHA512 c8bd619dc23ab4fb623e76d80c5d9413fbe7ffcd0e0041bf412bf36945105449bd5e1e0f1dfa8c7af6513c40d15364f5bbb4567c25c45448f23a819592b7033a
SSDEEP 6144:6YpGLNufx0obCDUjIs/SSms5qXhh6K9W9LV7dded89kTt:6nJufiRDUMSms2IK9W9Eac
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 421KB

file.exe

IMPHASH eeffe9860bc9c6507e24465b9b5239be
SHA256 1abf0a6c5d4cc2f05a6ae204eeb69102f94d540b0d1c3c8bafc975b91cf23340
MD5 ce58db64b6ae454438cb7eee1a7f13d0
SHA1 3ac20f59b88f8e40363f353127226def5a534add
SHA512 c8bd619dc23ab4fb623e76d80c5d9413fbe7ffcd0e0041bf412bf36945105449bd5e1e0f1dfa8c7af6513c40d15364f5bbb4567c25c45448f23a819592b7033a
SSDEEP 6144:6YpGLNufx0obCDUjIs/SSms5qXhh6K9W9LV7dded89kTt:6nJufiRDUMSms2IK9W9Eac
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW WaitNamedPipeW TlsSetValue GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesA TransactNamedPipe WriteConsoleW GetVolumePathNameA CreateJobObjectA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW LCMapStringW GetConsoleAliasesW GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing