file[.]exe | Triage™

General

Target
file.exe
Size 312KB
Sample221213-ssgfeshf2x
SHA256 1ec2de74e633b9a96a7cb6b2719d52c44b2d302e5960e72e4973e8f310c73079
MD5 f2b18bbe1d0016c0177ca9f3a0fad474
SHA1 9ed94ae0df316ef5960a46bee7cdc455c0e2f369
SHA512 e2c9e6449accd6c75d79a53e7b0807279031f1dcadbb700146fa9c61b1cdcfc4a7ae2783323bfe4588e74e4ea64620bee9330d055de76078c27d2691772e106e
SSDEEP 3072:ZqeWk/LwWWbZTs5ZJBs18p1BDkCeEPj5h78wN6+P9yw7aJhZmwQ6qFf1JzdXOXWY:4eWsL+NwJ/9YCvPjvNCGiQbFfjIXS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 312KB

file.exe

IMPHASH 45c2be331c36c7fa1d3739c3e4ad585a
SHA256 1ec2de74e633b9a96a7cb6b2719d52c44b2d302e5960e72e4973e8f310c73079
MD5 f2b18bbe1d0016c0177ca9f3a0fad474
SHA1 9ed94ae0df316ef5960a46bee7cdc455c0e2f369
SHA512 e2c9e6449accd6c75d79a53e7b0807279031f1dcadbb700146fa9c61b1cdcfc4a7ae2783323bfe4588e74e4ea64620bee9330d055de76078c27d2691772e106e
SSDEEP 3072:ZqeWk/LwWWbZTs5ZJBs18p1BDkCeEPj5h78wN6+P9yw7aJhZmwQ6qFf1JzdXOXWY:4eWsL+NwJ/9YCvPjvNCGiQbFfjIXS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23666

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetUserDefaultLCID GetModuleHandleW GlobalAlloc LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW GetConsoleAliasW WriteConsoleW LCMapStringA GetConsoleAliasesW GetStdHandle GetLastError OpenJobObjectA VirtualAlloc EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA WriteConsoleA GetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA AddConsoleAliasA DeleteVolumeMountPointA EndUpdateResourceW TlsGetValue GetProcAddress GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetStartupInfoW RaiseException RtlUnwind Sleep ExitProcess WriteFile GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA GetModuleHandleA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthFloatA

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

Sharing