file[.]exe | Triage™

General

Target
file.exe
Size 338KB
Sample221229-jptrxaff6w
SHA256 97a7b5572ad974c2cbc4fdbda70e0a8f39e875c2a8f0bcc78a7b03a7cc10ff3d
MD5 29fdc49a8009bc36f5b2d30a1c42c201
SHA1 9c2a37a06f74f77d73ceac31a22929be47f783a1
SHA512 be860767bc3ad9d33131409ecaee10efe6d3a4df5552614c1e18a0314a0261fe6b92733b71cb29995fbf62646f571be5ac218cdea66a4570f5ba2c85bfc13dca
SSDEEP 6144:mHUSgTLh400CVIAeCurGr7bmmtilw7n1HbwZoV9J:LS6F40DVhmI7xtIw7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 338KB

file.exe

IMPHASH 2fea883377e97671229dce9abe7eb7fe
SHA256 97a7b5572ad974c2cbc4fdbda70e0a8f39e875c2a8f0bcc78a7b03a7cc10ff3d
MD5 29fdc49a8009bc36f5b2d30a1c42c201
SHA1 9c2a37a06f74f77d73ceac31a22929be47f783a1
SHA512 be860767bc3ad9d33131409ecaee10efe6d3a4df5552614c1e18a0314a0261fe6b92733b71cb29995fbf62646f571be5ac218cdea66a4570f5ba2c85bfc13dca
SSDEEP 6144:mHUSgTLh400CVIAeCurGr7bmmtilw7n1HbwZoV9J:LS6F40DVhmI7xtIw7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14589

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar LCMapStringA SetLastError GetProcAddress TlsGetValue VirtualAllocEx LoadLibraryA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA GetCurrentThreadId GetConsoleProcessList VirtualAlloc GetComputerNameA GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyW

Sharing