file[.]exe | Triage™

General

Target
file.exe
Size 302KB
Sample221212-e1dgvaac87
SHA256 031e53d6d4fa8c8a2ef63cbcd1f698f2428e5c803bd44ac0f75784dfb21045d8
MD5 a7eeb59e10bdb0e17c2795096f4caf13
SHA1 321872ed2cc6eebcaa08c34cf3b9d89198141bf5
SHA512 dc8f1b8f351e7604fe71b53a2bc0d3b005af391c26bff1e2500c1fcd013adc7c12978fcf74f2d1eb44513b7930132df2e56b8499ffe1d2dd0d05e5e0dd7739c0
SSDEEP 6144:NzNLEcAUzAXB27dVJ1eT/draCe5dSyertCtPd2yV:TlAiAR2Bn1eT/dTe5dgtCtg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 302KB

file.exe

IMPHASH f34fdccd059639dc9459e550f9af960c
SHA256 031e53d6d4fa8c8a2ef63cbcd1f698f2428e5c803bd44ac0f75784dfb21045d8
MD5 a7eeb59e10bdb0e17c2795096f4caf13
SHA1 321872ed2cc6eebcaa08c34cf3b9d89198141bf5
SHA512 dc8f1b8f351e7604fe71b53a2bc0d3b005af391c26bff1e2500c1fcd013adc7c12978fcf74f2d1eb44513b7930132df2e56b8499ffe1d2dd0d05e5e0dd7739c0
SSDEEP 6144:NzNLEcAUzAXB27dVJ1eT/draCe5dSyertCtPd2yV:TlAiAR2Bn1eT/dTe5dgtCtg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22518

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MapUserPhysicalPages DeleteVolumeMountPointA EndUpdateResourceW CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA GetCalendarInfoW GetConsoleAliasW WriteConsoleW LCMapStringA GetStdHandle GetLastError GetProcAddress GetConsoleAliasExesLengthA EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA WriteConsoleA LocalAlloc CreateTapePartition SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW AddConsoleAliasA TlsGetValue VirtualAlloc GetComputerNameA HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing