file[.]exe | Triage™

General

Target
file.exe
Size 316KB
Sample221213-gvbgeagg7z
SHA256 923f78243a9bac3eeb38f051e01894e2b3d6607794bbb1dc64247e99b5ddfd8c
MD5 7f6e7c02b7a8ed9aaa257374aeaf78cf
SHA1 26a5e752c17fce36bdcfe5a3d7b6ae9ddaf32e51
SHA512 3e143826d562c588fbfad261f1bf381a26a791d3e2ce8672be6ed656b01ac0ff148c1c2573d38af0622f91f03f599d8319bb46bc2fc7d557061c105c5a3719e5
SSDEEP 6144:ZcjtsTiLLShKzbGx+M9CwnSE044Z0gKrW8BYQbFfNXS:+juhKs+9wSE090DrXBYeF1X
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 316KB

file.exe

IMPHASH ad10dd64c386884f70520e2be24d9dbb
SHA256 923f78243a9bac3eeb38f051e01894e2b3d6607794bbb1dc64247e99b5ddfd8c
MD5 7f6e7c02b7a8ed9aaa257374aeaf78cf
SHA1 26a5e752c17fce36bdcfe5a3d7b6ae9ddaf32e51
SHA512 3e143826d562c588fbfad261f1bf381a26a791d3e2ce8672be6ed656b01ac0ff148c1c2573d38af0622f91f03f599d8319bb46bc2fc7d557061c105c5a3719e5
SSDEEP 6144:ZcjtsTiLLShKzbGx+M9CwnSE044Z0gKrW8BYQbFfNXS:+juhKs+9wSE090DrXBYeF1X
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24322

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EndUpdateResourceW OpenJobObjectA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW GetConsoleAliasW WriteConsoleW LCMapStringA GetConsoleAliasesW GetStdHandle MapUserPhysicalPages GetProcAddress VirtualAlloc EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA WriteConsoleA LocalAlloc CreateTapePartition SetProcessWorkingSetSize SetThreadIdealProcessor FoldStringW FoldStringA FindFirstChangeNotificationA AddConsoleAliasA TlsGetValue GetLastError GetComputerNameA HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode GetModuleHandleA GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing