file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221213-2pc39sbb91
SHA256 99fc1826fbeae71db0195dff9510f20409d2f2d120d14a2b08ac8a00e986857c
MD5 fb06029fc75f9427d0edbc5a58896bd5
SHA1 2ecfe316c5ddce1da22bab475ed620635701614b
SHA512 b71d9bc7957c946206a4445b7c2bd6428f8b1a978d3ae61923c610642da0b0e2976c9bb3009822b8758d07c7fe89d768844f9f4c119e82c1b316722db0e473e3
SSDEEP 3072:PMfkLH49e3QHI4JiELn5MIZavbq6AN8VgsqAnTyKaN5mRDalxNy8bGbQ/E1PujKq:ckLYI8LBcqbTAnTy018btow
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH 1f1c40217078e6644c106961b763581a
SHA256 99fc1826fbeae71db0195dff9510f20409d2f2d120d14a2b08ac8a00e986857c
MD5 fb06029fc75f9427d0edbc5a58896bd5
SHA1 2ecfe316c5ddce1da22bab475ed620635701614b
SHA512 b71d9bc7957c946206a4445b7c2bd6428f8b1a978d3ae61923c610642da0b0e2976c9bb3009822b8758d07c7fe89d768844f9f4c119e82c1b316722db0e473e3
SSDEEP 3072:PMfkLH49e3QHI4JiELn5MIZavbq6AN8VgsqAnTyKaN5mRDalxNy8bGbQ/E1PujKq:ckLYI8LBcqbTAnTy018btow
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

6930

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile WriteConsoleOutputCharacterA LoadResource SetWaitableTimer MoveFileExW GlobalSize CreateJobObjectW GetModuleHandleExW SetHandleInformation FreeEnvironmentStringsA SetTapeParameters TzSpecificLocalTimeToSystemTime GetPriorityClass GetConsoleAliasExesLengthW LeaveCriticalSection GetFileAttributesW ReadFile GetCompressedFileSizeA lstrcatA GetEnvironmentVariableA GetVolumePathNameA WritePrivateProfileStringW CreateJobObjectA CopyFileExW IsDBCSLeadByteEx GetLongPathNameW GetConsoleDisplayMode SetFileAttributesA GetTempFileNameA GetAtomNameA LoadLibraryA LocalAlloc GetProfileStringA DeviceIoControl GlobalWire GetModuleFileNameA SetConsoleTitleW GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW VirtualProtect GetCurrentDirectoryA SetFileShortNameA InterlockedPushEntrySList SetEnvironmentVariableA CompareStringW EnumDateFormatsExW SetFilePointer SetDefaultCommConfigA LocalUnlock GetFullPathNameA GetLastError ExitProcess GetModuleHandleW Sleep GetProcAddress GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection RtlUnwind HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread WriteFile GetStdHandle DeleteCriticalSection FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA HeapSize GetLocaleInfoW GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle GetProcessHeap GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA RaiseException

user32

GetProcessDefaultLayout

advapi32

GetServiceKeyNameA GetSidLengthRequired EqualSid OpenEventLogW DestroyPrivateObjectSecurity PrivilegedServiceAuditAlarmW

Sharing