file[.]exe | Triage™

General

Target
file.exe
Size 383KB
Sample221209-massvach74
SHA256 3ac18e59408c1df49d8647dbe491a53344f396cbf456f528a0ce6208dfc4b7ab
MD5 0a75fc84941c7129be3d1ff4f47068e2
SHA1 0937ddf0bad3c251efc1b2151c376688038e1ba5
SHA512 fa60bbcd1b4b1a716c4eafe4b8bff2445b20fd2e2b8e4cb54401db8c637ece5a419fd9d6c8b71a3349dad9a69d10f7895306d90a04c4c99d55a5d68616b3283a
SSDEEP 6144:gZOLtKXx7oZDZOGQz0qAP8hh6K9W9xxVded89kTR:gM5KX1OO/7AEIK9W9xxWaw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 383KB

file.exe

IMPHASH eeffe9860bc9c6507e24465b9b5239be
SHA256 3ac18e59408c1df49d8647dbe491a53344f396cbf456f528a0ce6208dfc4b7ab
MD5 0a75fc84941c7129be3d1ff4f47068e2
SHA1 0937ddf0bad3c251efc1b2151c376688038e1ba5
SHA512 fa60bbcd1b4b1a716c4eafe4b8bff2445b20fd2e2b8e4cb54401db8c637ece5a419fd9d6c8b71a3349dad9a69d10f7895306d90a04c4c99d55a5d68616b3283a
SSDEEP 6144:gZOLtKXx7oZDZOGQz0qAP8hh6K9W9xxVded89kTR:gM5KX1OO/7AEIK9W9xxWaw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW WaitNamedPipeW TlsSetValue GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesA TransactNamedPipe WriteConsoleW GetVolumePathNameA CreateJobObjectA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW LCMapStringW GetConsoleAliasesW GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing