file[.]exe | Triage™

General

Target
file.exe
Size 428KB
Sample221211-v397lahb34
SHA256 72e706eff2cd192b0483463b7c198aeb917dc8baba4e7ac015ff1c575e974895
MD5 f083abd1af99f7f9b523d859947e8ac8
SHA1 5e7ba781bc40dc98f91ac262be48c8435ccfec68
SHA512 33750e47bb40d311b65a4981488fb33513bba2b14d80f1f3e05cede6d0d9ec2e0058ac7a6a0066a10d2e0b53cc2a600e39dcf6f4aea7bc06ba31344a4c8c2135
SSDEEP 12288:AnMechSqvWZXAJrwpL3sOcHdHAyOVljaatUQK:AnuS4eL3szAyOVljaa2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 428KB

file.exe

IMPHASH b7436d0d8fba44825adbaadf6f130cca
SHA256 72e706eff2cd192b0483463b7c198aeb917dc8baba4e7ac015ff1c575e974895
MD5 f083abd1af99f7f9b523d859947e8ac8
SHA1 5e7ba781bc40dc98f91ac262be48c8435ccfec68
SHA512 33750e47bb40d311b65a4981488fb33513bba2b14d80f1f3e05cede6d0d9ec2e0058ac7a6a0066a10d2e0b53cc2a600e39dcf6f4aea7bc06ba31344a4c8c2135
SSDEEP 12288:AnMechSqvWZXAJrwpL3sOcHdHAyOVljaatUQK:AnuS4eL3szAyOVljaa2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29738

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MapUserPhysicalPages DeleteVolumeMountPointA EndUpdateResourceW OpenJobObjectA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA GetCalendarInfoW GetConsoleAliasW WriteConsoleW LCMapStringA GetStdHandle GetLastError GetConsoleAliasExesLengthA VirtualAlloc EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA WriteConsoleA LocalAlloc CreateTapePartition SetProcessWorkingSetSize SetThreadIdealProcessor FoldStringW FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW AddConsoleAliasA TlsGetValue GetProcAddress GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA RaiseException GetModuleHandleA GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing