file[.]exe | Triage™

General

Target
file.exe
Size 434KB
Sample221228-bds28scb4t
SHA256 bcba2ad2941354623a0df7ec328d25262bb513de55acb31480e7bf964e25cbd4
MD5 87e8f47a3d3ce0ac20889cd274a2a790
SHA1 81af5509a1b939d19dbee5f31c5f0cc74c385ec2
SHA512 749c5d25188ee658bfc53029334cf74acd337d64071234782595ee95e7f882635fcd14355222b30cfeb4a211c172313686e81786c01e5c02a1cd08b5d02a04b7
SSDEEP 12288:r30lK7ZU4QHJ+jaCO/HJQrpfiljBaVc0din5JFR:28U4lOZGfCjYZd2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 434KB

file.exe

IMPHASH e9e79b553eadc083e1e9afe1573a5d2f
SHA256 bcba2ad2941354623a0df7ec328d25262bb513de55acb31480e7bf964e25cbd4
MD5 87e8f47a3d3ce0ac20889cd274a2a790
SHA1 81af5509a1b939d19dbee5f31c5f0cc74c385ec2
SHA512 749c5d25188ee658bfc53029334cf74acd337d64071234782595ee95e7f882635fcd14355222b30cfeb4a211c172313686e81786c01e5c02a1cd08b5d02a04b7
SSDEEP 12288:r30lK7ZU4QHJ+jaCO/HJQrpfiljBaVc0din5JFR:28U4lOZGfCjYZd2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14328

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons AddConsoleAliasW GetModuleHandleW GetTickCount DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar LCMapStringA SetLastError GetProcAddress TlsGetValue VirtualAllocEx LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA FreeEnvironmentStringsW GetCurrentThreadId GetConsoleProcessList VirtualAlloc GetComputerNameA HeapAlloc GetLastError HeapReAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyW

Sharing