file[.]exe | Triage™

General

Target
file.exe
Size 430KB
Sample221227-rwva1sfa47
SHA256 67ac34363734fbf78ecceff4d3a5d3c5af8bffc9a5b91cdc2569d2dee3fef93c
MD5 18d1d7e330e28852b85847f5d6c57d27
SHA1 d23e9d853c20987753287885aa5c6c7bd285be1a
SHA512 44748d03240507eca5f11909bb62f57f431d6e66794e720c9185b32c194f4b168f122c1ed515993bda47d1ce235f2b9db8a5e6feaa84c432587859da7d725316
SSDEEP 12288:/VVGDEmmZ8SS680PuLWZZm7m58xaxDPyrbA:/apm2Y80WL2r8xaNPyrc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 430KB

file.exe

IMPHASH 7e12ee611b41e13249fc1e7aa40c1883
SHA256 67ac34363734fbf78ecceff4d3a5d3c5af8bffc9a5b91cdc2569d2dee3fef93c
MD5 18d1d7e330e28852b85847f5d6c57d27
SHA1 d23e9d853c20987753287885aa5c6c7bd285be1a
SHA512 44748d03240507eca5f11909bb62f57f431d6e66794e720c9185b32c194f4b168f122c1ed515993bda47d1ce235f2b9db8a5e6feaa84c432587859da7d725316
SSDEEP 12288:/VVGDEmmZ8SS680PuLWZZm7m58xaxDPyrbA:/apm2Y80WL2r8xaNPyrc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14014

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons AddConsoleAliasW GetModuleHandleW LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc VirtualAllocEx GetConsoleAliasA LoadLibraryA WriteConsoleA GetProcessId LockResource SetProcessWorkingSetSize GetModuleHandleA QueryMemoryResourceNotification CreateMutexA FreeEnvironmentStringsW EndUpdateResourceA GetConsoleProcessList LCMapStringW TlsGetValue GetConsoleAliasExesA GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

gdi32

GetTextExtentExPointA

advapi32

RegQueryInfoKeyW

ole32

CoRegisterMallocSpy

Sharing