file[.]exe | Triage™

General

Target
file.exe
Size 429KB
Sample221211-ldly2agg55
SHA256 7b8343b03615f8c3f291256c8d2060bbf87c9e2af88bdf49f84fbb5f02ba4d57
MD5 254291aa0c98271a6232df46c6ff2b52
SHA1 cd72522f5360234f8e5689e19afb8944c53a7bee
SHA512 e1aaafbfc2dd4058452d5e32a6aa551f82a131869a39bda7798222b920e70149304d904cbec60e6501e8b8e122bb61c205bd53c58f38f29d83fe2c5d22f97d28
SSDEEP 6144:LI1sX0L5TgldbVbsTYg/bepWDNqLS6vhemDfe55vPpLje1atpBYqbM:LIY0NTgHVMYg/qO6vhFLihljaatUwM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 429KB

file.exe

IMPHASH 5296ceb46a7d59bca610f49e86d17520
SHA256 7b8343b03615f8c3f291256c8d2060bbf87c9e2af88bdf49f84fbb5f02ba4d57
MD5 254291aa0c98271a6232df46c6ff2b52
SHA1 cd72522f5360234f8e5689e19afb8944c53a7bee
SHA512 e1aaafbfc2dd4058452d5e32a6aa551f82a131869a39bda7798222b920e70149304d904cbec60e6501e8b8e122bb61c205bd53c58f38f29d83fe2c5d22f97d28
SSDEEP 6144:LI1sX0L5TgldbVbsTYg/bepWDNqLS6vhemDfe55vPpLje1atpBYqbM:LIY0NTgHVMYg/qO6vhFLihljaatUwM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26938

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW CreateJobObjectW GetUserDefaultLCID GetComputerNameW GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW EnumSystemCodePagesA GetFileAttributesW WriteConsoleW TlsGetValue LCMapStringA GetLastError GetProcAddress VirtualAlloc SetFileAttributesA LoadLibraryA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle AddConsoleAliasA FillConsoleOutputCharacterA SetThreadPriority GetFullPathNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA RaiseException GetModuleHandleA GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogA ReportEventW

winhttp

WinHttpCloseHandle

Sharing