file[.]exe | Triage™

General

Target
file.exe
Size 367KB
Sample221215-2etchadf78
SHA256 b1fe15394d3a406b37ce60bacb43aa513b13dcf07f726cf801d1ddf7b0022b30
MD5 d211cf641f8a43ab99547ece3e75fce8
SHA1 40007d421cf0eafd99145dfde7e396df9acac33c
SHA512 a3bdf25c28b1e5c648960994f7594093a5935b529d40234869f5b34e2835e41b25c34e2dd28a4b8b654e2bcc459eeadfaa7f99085c8f5da05065f3e048672e58
SSDEEP 6144:jYCnsLtkpf5ap3sGksxMQkRQWAKBNKvzYi9+0iPvzpQ6ijLxQFiaI:vsBkpBaBsnswRbA7vF+xnzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 367KB

file.exe

IMPHASH d134d10c41936619073a08bd546852f7
SHA256 b1fe15394d3a406b37ce60bacb43aa513b13dcf07f726cf801d1ddf7b0022b30
MD5 d211cf641f8a43ab99547ece3e75fce8
SHA1 40007d421cf0eafd99145dfde7e396df9acac33c
SHA512 a3bdf25c28b1e5c648960994f7594093a5935b529d40234869f5b34e2835e41b25c34e2dd28a4b8b654e2bcc459eeadfaa7f99085c8f5da05065f3e048672e58
SSDEEP 6144:jYCnsLtkpf5ap3sGksxMQkRQWAKBNKvzYi9+0iPvzpQ6ijLxQFiaI:vsBkpBaBsnswRbA7vF+xnzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18398

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID AddConsoleAliasW GetComputerNameW CreateHardLinkA GetModuleHandleW GetConsoleAliasesA TlsSetValue LoadLibraryW GetCalendarInfoW EnumSystemCodePagesA WriteConsoleW CreateJobObjectA LCMapStringA GetCPInfoExW GetLastError DeleteVolumeMountPointA GetProcAddress VirtualAlloc CreateMemoryResourceNotification WriteConsoleA SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringA VirtualProtect EndUpdateResourceA SetLastError GetConsoleAliasExesA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing