file[.]exe | Triage™

General

Target
file.exe
Size 326KB
Sample221229-pwrtsada73
SHA256 d7b9c47da642f6f5a5c2e89598427ef7d5f46df43950302e7a3b68ce619a6ca4
MD5 b47df17c4e2d61c1e8395ae105300614
SHA1 eaeaa514368e02afc6be3bdbf41c950a3c316679
SHA512 c5a8df76ae988bff75b054240e42db1c8aad1eedf485f945277fa5ea3a87feb4069cfd074b5038b92b49c64e4eb40643459c47910c55b96ac79e319dc73499ff
SSDEEP 6144:KUjFLlEgQpu8agVpmQ5mJYf67k13bwZ4Vxq:RpJEgQk8agyzYy7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH 1aa7866ff337e97b61492383e62cb2b6
SHA256 d7b9c47da642f6f5a5c2e89598427ef7d5f46df43950302e7a3b68ce619a6ca4
MD5 b47df17c4e2d61c1e8395ae105300614
SHA1 eaeaa514368e02afc6be3bdbf41c950a3c316679
SHA512 c5a8df76ae988bff75b054240e42db1c8aad1eedf485f945277fa5ea3a87feb4069cfd074b5038b92b49c64e4eb40643459c47910c55b96ac79e319dc73499ff
SSDEEP 6144:KUjFLlEgQpu8agVpmQ5mJYf67k13bwZ4Vxq:RpJEgQk8agyzYy7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14589

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc TlsGetValue LoadLibraryA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA GetCurrentThreadId GetConsoleProcessList LCMapStringW GetComputerNameA GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyA

Sharing