file[.]exe | Triage™

General

Target
file.exe
Size 383KB
Sample221209-ptf99sdb76
SHA256 2d7248ced4e866347104d0ea9d2741f5a986b9da3812ac957c2dd57f5ea16f19
MD5 bd1ea26ebfb7f8e980d78b9b34811185
SHA1 48dd47f86a8e8e4b9f60ddc8536ac3e086bf92c8
SHA512 da4e40d1aac43741fab32f91a9e4d21d7f613daf41e1106653592432ecdd816aa14bd2fafbe8ede3300f7203ce230fa671c19bfe772d49f6831c3aeec9c289a9
SSDEEP 6144:0blZL4WoFboE86cmEgJJ+9wFoF62KJshh6K9W9GF4Eejcded89kTRpA:07sWoRr80XJWRFfIK9W9G+NjNawpA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 383KB

file.exe

IMPHASH 939ac3696405ebabc97ca4eab14c3b80
SHA256 2d7248ced4e866347104d0ea9d2741f5a986b9da3812ac957c2dd57f5ea16f19
MD5 bd1ea26ebfb7f8e980d78b9b34811185
SHA1 48dd47f86a8e8e4b9f60ddc8536ac3e086bf92c8
SHA512 da4e40d1aac43741fab32f91a9e4d21d7f613daf41e1106653592432ecdd816aa14bd2fafbe8ede3300f7203ce230fa671c19bfe772d49f6831c3aeec9c289a9
SSDEEP 6144:0blZL4WoFboE86cmEgJJ+9wFoF62KJshh6K9W9GF4Eejcded89kTRpA:07sWoRr80XJWRFfIK9W9G+NjNawpA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28806

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA TlsGetValue GetCPInfo GetProfileIntW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesA TransactNamedPipe WriteConsoleW GetVolumePathNameA GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW LCMapStringW CreateJobObjectA GetFullPathNameW HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW

Sharing