file[.]exe | Triage™

General

Target
file.exe
Size 297KB
Sample221227-hsnvdsed58
SHA256 04cb3842669d80bb4eccff120f6fe00a480dc577035ca3a0cd37c351c3e61787
MD5 9bf85d6d12ba5e60ec3482ba9d69ee84
SHA1 a86cf3c6fbf7385a80b8979f2bf0eef233050971
SHA512 d584e4873637747661ecb104c29172fb9122ae9db4f1f40c423581fef81fd27c7875eac8df0b5f5e2908604b63eb53a15b10432481ac8bdefa68b61dc0546d09
SSDEEP 6144:cLNA/ZqvdzFQiTp0PC/uQ/58xQ3xDPkMo5zXbAc:cJAUdzFQExN58xaxDPyrbA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 297KB

file.exe

IMPHASH 3050cff05b5b7ecf4c2659da38f20fb1
SHA256 04cb3842669d80bb4eccff120f6fe00a480dc577035ca3a0cd37c351c3e61787
MD5 9bf85d6d12ba5e60ec3482ba9d69ee84
SHA1 a86cf3c6fbf7385a80b8979f2bf0eef233050971
SHA512 d584e4873637747661ecb104c29172fb9122ae9db4f1f40c423581fef81fd27c7875eac8df0b5f5e2908604b63eb53a15b10432481ac8bdefa68b61dc0546d09
SSDEEP 6144:cLNA/ZqvdzFQiTp0PC/uQ/58xQ3xDPkMo5zXbAc:cJAUdzFQExN58xaxDPyrbA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW TlsSetValue LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc VirtualAllocEx AddConsoleAliasW LoadLibraryA WriteConsoleA SetProcessWorkingSetSize QueryMemoryResourceNotification CreateMutexA SetThreadAffinityMask EndUpdateResourceA GetConsoleProcessList LCMapStringW GetConsoleAliasExesA GetConsoleAliasA GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

WindowFromDC

gdi32

GetTextExtentExPointW

advapi32

RegQueryInfoKeyA

ole32

CoRevokeMallocSpy

Sharing