file[.]exe | Triage™

General

Target
file.exe
Size 311KB
Sample221229-sk786sdc76
SHA256 95d5a2ae8c58598282ccc1cfe32a7fb3827aa19a9aee0001cd0ec25a3b5eec64
MD5 de61e3d9a4ace0519e957dc51994cf34
SHA1 9ab9c08bb658f81c7dcdcaf9f32cc6e9efe53c38
SHA512 3906af2f1647f0dde1826a30ba4f5f851d5e3fdf6da77e1d13cbe058df16798c406b3b032be82c28ca8a62cb498d7af06110d9fb918892515a5ffb12db575257
SSDEEP 6144:NxL1L5eZzupJqQeNj4yIxZ1WqqdS09JT:nZKzuLteNj4dYX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 311KB

file.exe

IMPHASH d70c373f4fbb723f1a28d96cba6c3918
SHA256 95d5a2ae8c58598282ccc1cfe32a7fb3827aa19a9aee0001cd0ec25a3b5eec64
MD5 de61e3d9a4ace0519e957dc51994cf34
SHA1 9ab9c08bb658f81c7dcdcaf9f32cc6e9efe53c38
SHA512 3906af2f1647f0dde1826a30ba4f5f851d5e3fdf6da77e1d13cbe058df16798c406b3b032be82c28ca8a62cb498d7af06110d9fb918892515a5ffb12db575257
SSDEEP 6144:NxL1L5eZzupJqQeNj4yIxZ1WqqdS09JT:nZKzuLteNj4dYX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14895

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc TlsGetValue LoadLibraryA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA GetCurrentThreadId GetConsoleProcessList LCMapStringW GetComputerNameA GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

advapi32

RegQueryInfoKeyA

Sharing