file[.]exe | Triage™

General

Target
file.exe
Size 312KB
Sample221229-v645radf35
SHA256 90679b4a0cb26f6038a05cfd8270d46a5b3c4995bbaf59efd6d3e5de4fdc29e5
MD5 e4f0b0d9139ec1eb82dc9cc1e20af7b4
SHA1 26a3a97f08ad1f75e423c9e5065cc8f1144ba84f
SHA512 3adec6e9cf5c7ac60f85adb18077ffa1639caf978bfa50ec83629b81984416b723c4e0b5f7982e3e1ee456b8c1496fab737c699a72f188e6c50d43ea199fba8b
SSDEEP 3072:Q3DLOYedv5MoJptICka6L1qZDUs6G+gSENrOKbIxe01Cz5Mqdqujodd/Jc5793Be:MLOYeMoLtBD6G+3yIxZ1WqqdS09R
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 312KB

file.exe

IMPHASH 9d1c3d28297405a9d4dc390e6629ae38
SHA256 90679b4a0cb26f6038a05cfd8270d46a5b3c4995bbaf59efd6d3e5de4fdc29e5
MD5 e4f0b0d9139ec1eb82dc9cc1e20af7b4
SHA1 26a3a97f08ad1f75e423c9e5065cc8f1144ba84f
SHA512 3adec6e9cf5c7ac60f85adb18077ffa1639caf978bfa50ec83629b81984416b723c4e0b5f7982e3e1ee456b8c1496fab737c699a72f188e6c50d43ea199fba8b
SSDEEP 3072:Q3DLOYedv5MoJptICka6L1qZDUs6G+gSENrOKbIxe01Cz5Mqdqujodd/Jc5793Be:MLOYeMoLtBD6G+3yIxZ1WqqdS09R
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15027

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA TlsGetValue DeleteVolumeMountPointA EndUpdateResourceW GetConsoleAliasA GetNumberOfConsoleMouseButtons SetThreadExecutionState FreeEnvironmentStringsA GetModuleHandleW GetTickCount LoadLibraryW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize OpenWaitableTimerW SetConsoleDisplayMode LockResource GetModuleHandleA QueryMemoryResourceNotification CreateMutexA GetCurrentThreadId GetConsoleProcessList LCMapStringW GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA GetStringTypeA GetStringTypeW

user32

WindowFromDC

Sharing