file[.]exe | Triage™

General

Target
file.exe
Size 338KB
Sample221229-halx3sfe8s
SHA256 6e281bec8eee8ab47f528e2957b8636faad8a462efc3d122c045c9fdbaa94142
MD5 6e784b2a0330eeefe4e0031aabde9b5b
SHA1 7a312bd5173ebefbdbd6f847b8bc2a2b1621b8ad
SHA512 297e3b042d27653bdd1a275704eef48e7077a9d88cd1481bf812b4ed297db59c342cacd3c12c1d7fb2db49a07fb3b47b938cf678bd1e7336f120108eaa624d05
SSDEEP 6144:GnU87Lb/E+IfGak9VF4kNb4Xw7n1HbwZoV9J:L+v6Tk9VGu4Xw7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 338KB

file.exe

IMPHASH 2fea883377e97671229dce9abe7eb7fe
SHA256 6e281bec8eee8ab47f528e2957b8636faad8a462efc3d122c045c9fdbaa94142
MD5 6e784b2a0330eeefe4e0031aabde9b5b
SHA1 7a312bd5173ebefbdbd6f847b8bc2a2b1621b8ad
SHA512 297e3b042d27653bdd1a275704eef48e7077a9d88cd1481bf812b4ed297db59c342cacd3c12c1d7fb2db49a07fb3b47b938cf678bd1e7336f120108eaa624d05
SSDEEP 6144:GnU87Lb/E+IfGak9VF4kNb4Xw7n1HbwZoV9J:L+v6Tk9VGu4Xw7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14589

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar LCMapStringA SetLastError GetProcAddress TlsGetValue VirtualAllocEx LoadLibraryA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA GetCurrentThreadId GetConsoleProcessList VirtualAlloc GetComputerNameA GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyW

Sharing