file[.]exe | Triage™

General

Target
file.exe
Size 440KB
Sample221229-1d7caseb95
SHA256 8e011d62273f132f8b643619be84d6a3e868b9ddacb15db75d855a4f3ed03eee
MD5 cb1b17aabe2d679b05e9e297d2215186
SHA1 e001ec1b7f413911eaac7e7a598a248f130c9f9f
SHA512 c07edc4cc80843b188dfceafbfc338d3e8dc692287eace02414565a123e5a67e035b42fe9012ad6fd6a0bfe6cfe4d3ba25cca053685a07628c0f587eb87957ea
SSDEEP 6144:PLSPTH2VUyZDrAMTT74hTg+LblDXyBqm6B88c9AIq1yIxZ1WqqdSv9x:P+PTH22kH746GIq/BNcg1dYU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 440KB

file.exe

IMPHASH dc6d59fa0d7fc86ece06132d0bca3c59
SHA256 8e011d62273f132f8b643619be84d6a3e868b9ddacb15db75d855a4f3ed03eee
MD5 cb1b17aabe2d679b05e9e297d2215186
SHA1 e001ec1b7f413911eaac7e7a598a248f130c9f9f
SHA512 c07edc4cc80843b188dfceafbfc338d3e8dc692287eace02414565a123e5a67e035b42fe9012ad6fd6a0bfe6cfe4d3ba25cca053685a07628c0f587eb87957ea
SSDEEP 6144:PLSPTH2VUyZDrAMTT74hTg+LblDXyBqm6B88c9AIq1yIxZ1WqqdSv9x:P+PTH22kH746GIq/BNcg1dYU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14410

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue DeleteVolumeMountPointA EndUpdateResourceW ReadConsoleA GetConsoleAliasA GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW MultiByteToWideChar LCMapStringA SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification GetCurrentThreadId GetConsoleProcessList UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW

user32

WindowFromDC

Sharing