file[.]exe | Triage™

General

Target
file.exe
Size 328KB
Sample221215-158pfadf53
SHA256 fe253a5e9c0dd8138d94383c900b8e002b85e3547b4a594ce08104c2bbfcd0cf
MD5 4ed1e65d00426ae8adbe2c29682992c1
SHA1 0be1e3f22767f8ce1677ccb19e50327dcf2c3525
SHA512 9390944f6e53319a874647b01e25eaa0c39b42a00d8ad4092e7c6b82c1ec2de44a4641bfc086962e374940afab50c46430c3b79c08ede0a85785aa02211e2d29
SSDEEP 6144:kY8BOLo4ckO7AGAaMgsNtg9K0iPvzpQ6ijLxQFiaI:ZHckOSx75xnzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH d134d10c41936619073a08bd546852f7
SHA256 fe253a5e9c0dd8138d94383c900b8e002b85e3547b4a594ce08104c2bbfcd0cf
MD5 4ed1e65d00426ae8adbe2c29682992c1
SHA1 0be1e3f22767f8ce1677ccb19e50327dcf2c3525
SHA512 9390944f6e53319a874647b01e25eaa0c39b42a00d8ad4092e7c6b82c1ec2de44a4641bfc086962e374940afab50c46430c3b79c08ede0a85785aa02211e2d29
SSDEEP 6144:kY8BOLo4ckO7AGAaMgsNtg9K0iPvzpQ6ijLxQFiaI:ZHckOSx75xnzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18398

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID AddConsoleAliasW GetComputerNameW CreateHardLinkA GetModuleHandleW GetConsoleAliasesA TlsSetValue LoadLibraryW GetCalendarInfoW EnumSystemCodePagesA WriteConsoleW CreateJobObjectA LCMapStringA GetCPInfoExW GetLastError DeleteVolumeMountPointA GetProcAddress VirtualAlloc CreateMemoryResourceNotification WriteConsoleA SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringA VirtualProtect EndUpdateResourceA SetLastError GetConsoleAliasExesA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing