file[.]exe | Triage™

General

Target
file.exe
Size 426KB
Sample221211-p89kcsgh64
SHA256 ebcec47b607f73c28b134255f95e2f9db29d39363726c85efba19534f7bade43
MD5 f113a8aac35224468fa0f12f59edb601
SHA1 40c6b372ce54a32ca686c0c4b8c793867b64cbb3
SHA512 24b5f4373ad3e5c940d0aa525d61d12f154ce10ccf5a3b04d8bca19901258c09199a640bd8cc0896da0a766630f9c6009d2fe217b052c443f6a3f5f4b2ef0ff5
SSDEEP 12288:pBxfOZWlI8LpQBv2fWfZtqj5CyfljaatUQW:p/+WJ84Wfru5CMljaa2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 426KB

file.exe

IMPHASH d5632d54ec7a430a4ccbd59048a8a61d
SHA256 ebcec47b607f73c28b134255f95e2f9db29d39363726c85efba19534f7bade43
MD5 f113a8aac35224468fa0f12f59edb601
SHA1 40c6b372ce54a32ca686c0c4b8c793867b64cbb3
SHA512 24b5f4373ad3e5c940d0aa525d61d12f154ce10ccf5a3b04d8bca19901258c09199a640bd8cc0896da0a766630f9c6009d2fe217b052c443f6a3f5f4b2ef0ff5
SSDEEP 12288:pBxfOZWlI8LpQBv2fWfZtqj5CyfljaatUQW:p/+WJ84Wfru5CMljaa2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27146

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW WaitNamedPipeA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA GetUserDefaultLangID LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW GetFileAttributesW WriteConsoleW SetThreadPriority LCMapStringA FillConsoleOutputCharacterW TlsGetValue GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle AddConsoleAliasA GetVolumeInformationW GetFullPathNameA GetLastError GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA RaiseException GetModuleHandleA GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing