file[.]exe | Triage™

General

Target
file.exe
Size 297KB
Sample221227-rf4vhsfa28
SHA256 e4efd38a774a711cb92377bd65a5d27fa3246edfdcfe54d321317132befd8797
MD5 d2cba0177f43f185a3fdf14e048df915
SHA1 38040281576deb00115b85a3e01189d5ca886851
SHA512 3ec18f18a018378c42e39a5979ca865193cc15008fe2e1153a74bba8b95a7311bfbdcef6caa343b93701f0284c584edf14db77289154882c0bde21243cde9413
SSDEEP 6144:PaJLNo1knZtY1ZAEwJWPptA58xQ3xDPkMo5zXbAc:CJBoIY0EwJWP058xaxDPyrbA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 297KB

file.exe

IMPHASH 7e12ee611b41e13249fc1e7aa40c1883
SHA256 e4efd38a774a711cb92377bd65a5d27fa3246edfdcfe54d321317132befd8797
MD5 d2cba0177f43f185a3fdf14e048df915
SHA1 38040281576deb00115b85a3e01189d5ca886851
SHA512 3ec18f18a018378c42e39a5979ca865193cc15008fe2e1153a74bba8b95a7311bfbdcef6caa343b93701f0284c584edf14db77289154882c0bde21243cde9413
SSDEEP 6144:PaJLNo1knZtY1ZAEwJWPptA58xQ3xDPkMo5zXbAc:CJBoIY0EwJWP058xaxDPyrbA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons AddConsoleAliasW GetModuleHandleW LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc VirtualAllocEx GetConsoleAliasA LoadLibraryA WriteConsoleA GetProcessId LockResource SetProcessWorkingSetSize GetModuleHandleA QueryMemoryResourceNotification CreateMutexA FreeEnvironmentStringsW EndUpdateResourceA GetConsoleProcessList LCMapStringW TlsGetValue GetConsoleAliasExesA GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

gdi32

GetTextExtentExPointA

advapi32

RegQueryInfoKeyW

ole32

CoRegisterMallocSpy

Sharing