file[.]exe | Triage™

General

Target
file.exe
Size 312KB
Sample221229-sdwa2adc57
SHA256 b592b7bc9f9309f9347eb0a1eef93f67611451d25f6d20ee36c8f2358201ce2d
MD5 5588c91a9fd13f56813e41346c27080a
SHA1 a862e4b299f2507d5760ef9a439236d1da07a8df
SHA512 0a25478d3ce119b0135301aef2f9c4e21dcea32baa5475b297a2cbc10e795f4eeed4cfab27333d6c621139261ab59b125174712b851e1b934e12a0ae1f6bacdd
SSDEEP 6144:6UELgnQfGM4kt1nmPEz7mIAyIxZ1WqqdS091:hE0nUVsEzOdYX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 312KB

file.exe

IMPHASH d70c373f4fbb723f1a28d96cba6c3918
SHA256 b592b7bc9f9309f9347eb0a1eef93f67611451d25f6d20ee36c8f2358201ce2d
MD5 5588c91a9fd13f56813e41346c27080a
SHA1 a862e4b299f2507d5760ef9a439236d1da07a8df
SHA512 0a25478d3ce119b0135301aef2f9c4e21dcea32baa5475b297a2cbc10e795f4eeed4cfab27333d6c621139261ab59b125174712b851e1b934e12a0ae1f6bacdd
SSDEEP 6144:6UELgnQfGM4kt1nmPEz7mIAyIxZ1WqqdS091:hE0nUVsEzOdYX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14565

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc TlsGetValue LoadLibraryA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA GetCurrentThreadId GetConsoleProcessList LCMapStringW GetComputerNameA GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyA

Sharing