file[.]exe | Triage™

General

Target
file.exe
Size 444KB
Sample221229-sdwa2age6s
SHA256 5c0c3090f7bbb8b9323da12a03a63c73410f11c4e2b4c0f3bc9fd7f817575ec9
MD5 58d3cd26737d1d5a47a52b6468546ab8
SHA1 bf1622858e381fc0fb238a08a087e1a0a7512976
SHA512 cbf53d76e6184f4db903690965784bdfcf3b0716abe20aa3279d2d91711a83bb66edb11446d73379f90b3d0ff7b694932a7abbebe80084dd4a8be36581ca9a47
SSDEEP 6144:cUnLt4TguMU8jkCIzf3AeDAjwQJ/EigY4A0GvCJ/dyFIUVoFPJ2tyIxZ1WqqdS0v:fnx4TgnkCWD6rO9A0GvwFuIUa2tdYX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 444KB

file.exe

IMPHASH d70c373f4fbb723f1a28d96cba6c3918
SHA256 5c0c3090f7bbb8b9323da12a03a63c73410f11c4e2b4c0f3bc9fd7f817575ec9
MD5 58d3cd26737d1d5a47a52b6468546ab8
SHA1 bf1622858e381fc0fb238a08a087e1a0a7512976
SHA512 cbf53d76e6184f4db903690965784bdfcf3b0716abe20aa3279d2d91711a83bb66edb11446d73379f90b3d0ff7b694932a7abbebe80084dd4a8be36581ca9a47
SSDEEP 6144:cUnLt4TguMU8jkCIzf3AeDAjwQJ/EigY4A0GvCJ/dyFIUVoFPJ2tyIxZ1WqqdS0v:fnx4TgnkCWD6rO9A0GvwFuIUa2tdYX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14565

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc TlsGetValue LoadLibraryA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA GetCurrentThreadId GetConsoleProcessList LCMapStringW GetComputerNameA GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyA

Sharing