file[.]exe | Triage™

General

Target
file.exe
Size 325KB
Sample221211-rxexqaha34
SHA256 9b0652ee1f70fe88cbfb7cb27040b89725a073d3b5a7e4e93c4d6f5cc252b969
MD5 d69743b446f4628d26d402d28ff15257
SHA1 53a9a88f854d907aef1fcea3f76dd316b919f4c5
SHA512 7ac6544b5ece31f2bf28e2655fbe7b0f0a2dd4b5ed0347e99ba6c048cbc125407d5408076df71ecd4f3a98477bd265791c9c3773300bd5af04e4d945b4febb6e
SSDEEP 6144:/dRw2jLKho/dHmMJOD50bpLje1atpBYQW:/dVj2hoTljaatUQW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 325KB

file.exe

IMPHASH d5632d54ec7a430a4ccbd59048a8a61d
SHA256 9b0652ee1f70fe88cbfb7cb27040b89725a073d3b5a7e4e93c4d6f5cc252b969
MD5 d69743b446f4628d26d402d28ff15257
SHA1 53a9a88f854d907aef1fcea3f76dd316b919f4c5
SHA512 7ac6544b5ece31f2bf28e2655fbe7b0f0a2dd4b5ed0347e99ba6c048cbc125407d5408076df71ecd4f3a98477bd265791c9c3773300bd5af04e4d945b4febb6e
SSDEEP 6144:/dRw2jLKho/dHmMJOD50bpLje1atpBYQW:/dVj2hoTljaatUQW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27146

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW WaitNamedPipeA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA GetUserDefaultLangID LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW GetFileAttributesW WriteConsoleW SetThreadPriority LCMapStringA FillConsoleOutputCharacterW TlsGetValue GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle AddConsoleAliasA GetVolumeInformationW GetFullPathNameA GetLastError GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA RaiseException GetModuleHandleA GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing