file[.]exe | Triage™

General

Target
file.exe
Size 321KB
Sample221213-pk183sef35
SHA256 dfa7863ed2db1f95f6166f90a73cb3106e37e41e538d62431ef8b7caa061fb34
MD5 2d41a5636ece6130a85ac40e93868569
SHA1 3a9eb13e40cc57e2a812ec20b3fb9929a80156d1
SHA512 cccd24d63cd2a8e02baf6a0583a4a6f0507e012df7c5f5b0ce882b86cbb416c72ac1aaff367aa6751fb95b80d689109e52bd0cbb36e7d331c1692b687fb0af61
SSDEEP 6144:cUjtFRuLlfFuZvHMz6cjK/iuITUifKQbFfjIXS:PsZfFutHMzHK/iuQUifKeFLIX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 321KB

file.exe

IMPHASH b208bb84287118a5916acdec10ce98ca
SHA256 dfa7863ed2db1f95f6166f90a73cb3106e37e41e538d62431ef8b7caa061fb34
MD5 2d41a5636ece6130a85ac40e93868569
SHA1 3a9eb13e40cc57e2a812ec20b3fb9929a80156d1
SHA512 cccd24d63cd2a8e02baf6a0583a4a6f0507e012df7c5f5b0ce882b86cbb416c72ac1aaff367aa6751fb95b80d689109e52bd0cbb36e7d331c1692b687fb0af61
SSDEEP 6144:cUjtFRuLlfFuZvHMz6cjK/iuITUifKQbFfjIXS:PsZfFutHMzHK/iuQUifKeFLIX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24322

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA CreateJobObjectW GetUserDefaultLCID GetModuleHandleW GetTickCount GlobalAlloc LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW GetConsoleAliasW WriteConsoleW LCMapStringA GetConsoleAliasesW GetStdHandle GetLastError EndUpdateResourceW VirtualAlloc EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA WriteConsoleA CreateTapePartition SetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA FindFirstChangeNotificationA AddConsoleAliasA MapUserPhysicalPages DeleteVolumeMountPointA TlsGetValue GetProcAddress GetComputerNameA HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode GetModuleHandleA GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharWidthFloatA

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing