file[.]exe | Triage™

General

Target
file.exe
Size 312KB
Sample221213-w4babsaa8s
SHA256 244cdafa128a3e1e159da247efe9ec2d02848c068ee9c3a1aeb4cef2526ae0fa
MD5 6b15ec6e678bac5b9095c22153444e66
SHA1 2fae750efb1ecdd02364706112269e685a626878
SHA512 5a41f9325f886633cbb60debaa6e61297489755e622bc1676c4de65908c4954a0599f97e49b4eeefd020e1ae349755b92ccf774113b9ee0457033a92d7f65e30
SSDEEP 6144:Ee9wL92EcNFZ/TmWIBOM1L8jRMnX+dvQuG23BOHT:Euw52BNzqWHM1WkOdor2k
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 312KB

file.exe

IMPHASH b9d130cad14d4ae991a0806b99bf8ee3
SHA256 244cdafa128a3e1e159da247efe9ec2d02848c068ee9c3a1aeb4cef2526ae0fa
MD5 6b15ec6e678bac5b9095c22153444e66
SHA1 2fae750efb1ecdd02364706112269e685a626878
SHA512 5a41f9325f886633cbb60debaa6e61297489755e622bc1676c4de65908c4954a0599f97e49b4eeefd020e1ae349755b92ccf774113b9ee0457033a92d7f65e30
SSDEEP 6144:Ee9wL92EcNFZ/TmWIBOM1L8jRMnX+dvQuG23BOHT:Euw52BNzqWHM1WkOdor2k
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23218

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetUserDefaultLCID GetModuleHandleW GetConsoleAliasesA GlobalAlloc LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW GetConsoleAliasW WriteConsoleW LCMapStringA GetLastError GetProcAddress OpenJobObjectA EnumSystemCodePagesW SetStdHandle CreateMemoryResourceNotification LoadLibraryA WriteConsoleA GetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA AddConsoleAliasA DeleteVolumeMountPointA EndUpdateResourceW TlsGetValue VirtualAlloc GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetStartupInfoW RaiseException RtlUnwind Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers GetModuleHandleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthFloatA

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

Sharing