file[.]exe | Triage™

General

Target
file.exe
Size 307KB
Sample221229-2fynlsec99
SHA256 29a506ab79b5e72d2169d5f3d96f0bed2210dd5eaad37cb050a16f22a8a6f2f3
MD5 6104b7a32237a088122e01e1dd326469
SHA1 0e7710eb3e5c873f9b4527006b427254faf63b33
SHA512 9d8fcff19ffbdfccbd4ad6da94990805e11949dc3d9c36928c03d2abb0d38c906696a517f1e5f379ec5d4aba0841c86cf57b1d59bcad4f4c4d0c3ff2a48ce80c
SSDEEP 6144:ALaVVJblnzoM2cjJmObrIyIxZ1WqqdSv9x:AGVlntJm5dYU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 307KB

file.exe

IMPHASH dc6d59fa0d7fc86ece06132d0bca3c59
SHA256 29a506ab79b5e72d2169d5f3d96f0bed2210dd5eaad37cb050a16f22a8a6f2f3
MD5 6104b7a32237a088122e01e1dd326469
SHA1 0e7710eb3e5c873f9b4527006b427254faf63b33
SHA512 9d8fcff19ffbdfccbd4ad6da94990805e11949dc3d9c36928c03d2abb0d38c906696a517f1e5f379ec5d4aba0841c86cf57b1d59bcad4f4c4d0c3ff2a48ce80c
SSDEEP 6144:ALaVVJblnzoM2cjJmObrIyIxZ1WqqdSv9x:AGVlntJm5dYU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14410

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue DeleteVolumeMountPointA EndUpdateResourceW ReadConsoleA GetConsoleAliasA GetNumberOfConsoleMouseButtons GetComputerNameW SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW MultiByteToWideChar LCMapStringA SetLastError GetProcAddress VirtualAlloc LoadLibraryA OpenMutexA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification GetCurrentThreadId GetConsoleProcessList UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW

user32

WindowFromDC

Sharing