file[.]exe | Triage™

General

Target
file.exe
Size 402KB
Sample221228-beyn4sha88
SHA256 9cfd4fc2b533f3911f6ec8b394ce0b65aae140f262299d2bb91e7e23c1b459bb
MD5 49227c55825052044da5757a6f0c0df1
SHA1 cfb9476e1903fccabf4bd4f8dc457ea4baa040f3
SHA512 620d27f43ec396830420ff1f0735966ca751b4257c91522780e2bab60d42f85d6ac4a10653ce5b04fdfd0f3a2b7af9f96caffa09bc0894fb8c15383c307ef259
SSDEEP 6144:JolLXZl7NM9q5kE5/vdE2//XpvYI9a9Vyu9UZdLaYon5Jk4eROXNj:yL+c5ks/vR/xv6c5din5JFR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 402KB

file.exe

IMPHASH e9e79b553eadc083e1e9afe1573a5d2f
SHA256 9cfd4fc2b533f3911f6ec8b394ce0b65aae140f262299d2bb91e7e23c1b459bb
MD5 49227c55825052044da5757a6f0c0df1
SHA1 cfb9476e1903fccabf4bd4f8dc457ea4baa040f3
SHA512 620d27f43ec396830420ff1f0735966ca751b4257c91522780e2bab60d42f85d6ac4a10653ce5b04fdfd0f3a2b7af9f96caffa09bc0894fb8c15383c307ef259
SSDEEP 6144:JolLXZl7NM9q5kE5/vdE2//XpvYI9a9Vyu9UZdLaYon5Jk4eROXNj:yL+c5ks/vR/xv6c5din5JFR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14328

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons AddConsoleAliasW GetModuleHandleW GetTickCount DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar LCMapStringA SetLastError GetProcAddress TlsGetValue VirtualAllocEx LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA FreeEnvironmentStringsW GetCurrentThreadId GetConsoleProcessList VirtualAlloc GetComputerNameA HeapAlloc GetLastError HeapReAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyW

Sharing