file[.]exe | Triage™

General

Target
file.exe
Size 316KB
Sample221213-jftesaec39
SHA256 2308fb2fbbe883fe5d66e90ae3d3be46ebfa55a9d3977bb3e490a92080dab4a0
MD5 86a6fbe5e2bf447a61cc17369815403f
SHA1 fe9705eb26971ed34d70d5d6179f7c02e37baf78
SHA512 67279cb2edc5f1c381f35c2ff5e9b6b6237211a8fe4014e484683f200e3b1ef1940ede0ade23de5041ae07a55992690761af9530824fc85c467ad9e8881d25f9
SSDEEP 6144:VajtyjbaxLyNk9fERAEczms+8rpBiUrW8BYQbFfNXS:wTeNkBERAES6WTrXBYeF1X
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 316KB

file.exe

IMPHASH ad10dd64c386884f70520e2be24d9dbb
SHA256 2308fb2fbbe883fe5d66e90ae3d3be46ebfa55a9d3977bb3e490a92080dab4a0
MD5 86a6fbe5e2bf447a61cc17369815403f
SHA1 fe9705eb26971ed34d70d5d6179f7c02e37baf78
SHA512 67279cb2edc5f1c381f35c2ff5e9b6b6237211a8fe4014e484683f200e3b1ef1940ede0ade23de5041ae07a55992690761af9530824fc85c467ad9e8881d25f9
SSDEEP 6144:VajtyjbaxLyNk9fERAEczms+8rpBiUrW8BYQbFfNXS:wTeNkBERAES6WTrXBYeF1X
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24322

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EndUpdateResourceW OpenJobObjectA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW GetConsoleAliasW WriteConsoleW LCMapStringA GetConsoleAliasesW GetStdHandle MapUserPhysicalPages GetProcAddress VirtualAlloc EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA WriteConsoleA LocalAlloc CreateTapePartition SetProcessWorkingSetSize SetThreadIdealProcessor FoldStringW FoldStringA FindFirstChangeNotificationA AddConsoleAliasA TlsGetValue GetLastError GetComputerNameA HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode GetModuleHandleA GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing