file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample221227-1w72jsge76
SHA256 9d7301c67f1622ae78ecb47d85bf5e693bc92f2a4c963068c03b6f7b24f33b96
MD5 2696436262a5e030ee3ea3957fed4c9a
SHA1 7dc56a360e948a0f9818abc5dbe1264e3595c054
SHA512 180f8cdd55fd7454a40053f4e1ad962fb6b1374a24a10ccd00027cbd6e480259084131c11ca8d259ed3557ad9ecd9b09d1076ba437a1c685845e8b59d7735531
SSDEEP 6144:NTLZ0WbjOnFu5ROu41+xgp/9UZdLaYon5Jk4eROw:Jl0BuvOzUdin5JF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH f906f57bba5f798fc5f29ed19dfc58fe
SHA256 9d7301c67f1622ae78ecb47d85bf5e693bc92f2a4c963068c03b6f7b24f33b96
MD5 2696436262a5e030ee3ea3957fed4c9a
SHA1 7dc56a360e948a0f9818abc5dbe1264e3595c054
SHA512 180f8cdd55fd7454a40053f4e1ad962fb6b1374a24a10ccd00027cbd6e480259084131c11ca8d259ed3557ad9ecd9b09d1076ba437a1c685845e8b59d7735531
SSDEEP 6144:NTLZ0WbjOnFu5ROu41+xgp/9UZdLaYon5Jk4eROw:Jl0BuvOzUdin5JF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14428

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA GetConsoleAliasA GetNumberOfConsoleMouseButtons AddConsoleAliasW GetModuleHandleW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc VirtualAllocEx TlsGetValue LoadLibraryA WriteConsoleA GetProcessId GetProcessWorkingSetSize LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA FreeEnvironmentStringsW EndUpdateResourceA GetConsoleProcessList LCMapStringW GetComputerNameA HeapAlloc GetLastError HeapReAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyW

ole32

CoRegisterMallocSpy

Sharing