file[.]exe | Triage™

General

Target
file.exe
Size 302KB
Sample221212-b34j9sab39
SHA256 4069c6ade9574c93e0a85fa4dc74ad065f76206470e460515b99c3dde8e98e21
MD5 8c621a4ebb46fe43be612cc089c5a8cc
SHA1 aed819b81a81bc6101c66ae10aa9d07f94220cdf
SHA512 f2c9f53e00deb7e3c7f3d091af8fa87f0b072338301ea85cc9fd83d8736a83e5cfff77884aaf5ac955c698e0e2fbfa37462590c5c9443adee4f18c4be0e53529
SSDEEP 6144:bCTLXEqFiiP4n1FxgOHFHyZ1KF4dSyertCtPd2yV:KYqwigFxjlHyrKCdgtCtg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 302KB

file.exe

IMPHASH f34fdccd059639dc9459e550f9af960c
SHA256 4069c6ade9574c93e0a85fa4dc74ad065f76206470e460515b99c3dde8e98e21
MD5 8c621a4ebb46fe43be612cc089c5a8cc
SHA1 aed819b81a81bc6101c66ae10aa9d07f94220cdf
SHA512 f2c9f53e00deb7e3c7f3d091af8fa87f0b072338301ea85cc9fd83d8736a83e5cfff77884aaf5ac955c698e0e2fbfa37462590c5c9443adee4f18c4be0e53529
SSDEEP 6144:bCTLXEqFiiP4n1FxgOHFHyZ1KF4dSyertCtPd2yV:KYqwigFxjlHyrKCdgtCtg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22518

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MapUserPhysicalPages DeleteVolumeMountPointA EndUpdateResourceW CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA GetCalendarInfoW GetConsoleAliasW WriteConsoleW LCMapStringA GetStdHandle GetLastError GetProcAddress GetConsoleAliasExesLengthA EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA WriteConsoleA LocalAlloc CreateTapePartition SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW AddConsoleAliasA TlsGetValue VirtualAlloc GetComputerNameA HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing