file[.]exe | Triage™

General

Target
file.exe
Size 435KB
Sample221227-w6ltvaba2w
SHA256 61a7fcc7fc8b643e115022a1c0e011ea2c3c53e44e7c96b9260378edba5e6ea7
MD5 607ec2353929f2a88fed4594dca904f0
SHA1 cf4cbc188edb0ca4ceefa6234189fe5cf4762bc0
SHA512 2265cdfb9f56735bd23e2db38d50ba4989c0f73a8e234658237d86f36086c5ea27c1515bd42e9b10547e264df89616e16d998e99367ac515d731e83b01d0e51a
SSDEEP 6144:za9Ld+tj38ZE2WAp76hOm+otZgxRObPn11/l3WLYM99UZdLaYon5Jk4eROw1g:+9R+l2DNGkItZgLm933NMYdin5JF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 435KB

file.exe

IMPHASH 7e12ee611b41e13249fc1e7aa40c1883
SHA256 61a7fcc7fc8b643e115022a1c0e011ea2c3c53e44e7c96b9260378edba5e6ea7
MD5 607ec2353929f2a88fed4594dca904f0
SHA1 cf4cbc188edb0ca4ceefa6234189fe5cf4762bc0
SHA512 2265cdfb9f56735bd23e2db38d50ba4989c0f73a8e234658237d86f36086c5ea27c1515bd42e9b10547e264df89616e16d998e99367ac515d731e83b01d0e51a
SSDEEP 6144:za9Ld+tj38ZE2WAp76hOm+otZgxRObPn11/l3WLYM99UZdLaYon5Jk4eROw1g:+9R+l2DNGkItZgLm933NMYdin5JF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14029

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons AddConsoleAliasW GetModuleHandleW LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc VirtualAllocEx GetConsoleAliasA LoadLibraryA WriteConsoleA GetProcessId LockResource SetProcessWorkingSetSize GetModuleHandleA QueryMemoryResourceNotification CreateMutexA FreeEnvironmentStringsW EndUpdateResourceA GetConsoleProcessList LCMapStringW TlsGetValue GetConsoleAliasExesA GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

gdi32

GetTextExtentExPointA

advapi32

RegQueryInfoKeyW

ole32

CoRegisterMallocSpy

Sharing