file[.]exe | Triage™

General

Target
file.exe
Size 382KB
Sample221209-mw9ngsfh21
SHA256 4a187d47962dbe2e2e6443191344cc93aa30d1a68a34efc5f3d3bf79920863dc
MD5 a85f68609c96322c235fa52ced13e968
SHA1 111585e298fe5a2463bce4c62868d36f78123a51
SHA512 7c5984a6baf8044d1761621b11aabea82b93ff6d9e82f9f9fd05574f94dff24cd21c4c1b63a803fbedca6d4d54c2f9807be43a71f44c8e4f1c1279806b826d86
SSDEEP 6144:FpNdnLY2tFfoTT/CM3zgXSjIshh6K9W9Dn5mded89kTRcA:Fpjk2t9eT6M3DDIK9W9L53awcA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 382KB

file.exe

IMPHASH 939ac3696405ebabc97ca4eab14c3b80
SHA256 4a187d47962dbe2e2e6443191344cc93aa30d1a68a34efc5f3d3bf79920863dc
MD5 a85f68609c96322c235fa52ced13e968
SHA1 111585e298fe5a2463bce4c62868d36f78123a51
SHA512 7c5984a6baf8044d1761621b11aabea82b93ff6d9e82f9f9fd05574f94dff24cd21c4c1b63a803fbedca6d4d54c2f9807be43a71f44c8e4f1c1279806b826d86
SSDEEP 6144:FpNdnLY2tFfoTT/CM3zgXSjIshh6K9W9Dn5mded89kTRcA:Fpjk2t9eT6M3DDIK9W9L53awcA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28806

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA TlsGetValue GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesA TransactNamedPipe WriteConsoleW GetVolumePathNameA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW LCMapStringW CreateJobObjectA GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing