file[.]exe | Triage™

General

Target
file.exe
Size 425KB
Sample221211-pql2cagh46
SHA256 4c8b47b5867731ca46ffbbe4dbbc759b052fb182d0bb2d70eeb1de0311786c76
MD5 b87474f7b925d0ad867980794306a45a
SHA1 9cb856591ce0532ccfdf5fc767abb9f5195182aa
SHA512 e7e4ba8ce82b76d31afe00dc8760334aa3851507d599d847f5d0207ecfba4f73542ae7134ca7a2ad60cd8bcd97cbfb817ca526d070c869b0a7685c5228e291ca
SSDEEP 12288:ugCYJEH3aMOzuaOsddNoh7McIz1+UEGdljaatUwi:uzZH37MbOs1o5UEwljaa2w
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 425KB

file.exe

IMPHASH ff8b1829dbcb976abb65108d20505b01
SHA256 4c8b47b5867731ca46ffbbe4dbbc759b052fb182d0bb2d70eeb1de0311786c76
MD5 b87474f7b925d0ad867980794306a45a
SHA1 9cb856591ce0532ccfdf5fc767abb9f5195182aa
SHA512 e7e4ba8ce82b76d31afe00dc8760334aa3851507d599d847f5d0207ecfba4f73542ae7134ca7a2ad60cd8bcd97cbfb817ca526d070c869b0a7685c5228e291ca
SSDEEP 12288:ugCYJEH3aMOzuaOsddNoh7McIz1+UEGdljaatUwi:uzZH37MbOs1o5UEwljaa2w
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27002

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW WaitNamedPipeA CreateJobObjectW GetUserDefaultLCID GetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesA GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW EnumSystemCodePagesA GetFileAttributesW TlsGetValue SetThreadPriority LCMapStringA GetLastError GetProcAddress VirtualAlloc SetFileAttributesA LoadLibraryA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle AddConsoleAliasA FillConsoleOutputCharacterA WriteConsoleW GetFullPathNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA RaiseException GetModuleHandleA GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogA ReportEventW

winhttp

WinHttpCloseHandle

Sharing