file[.]exe | Triage™

General

Target
file.exe
Size 367KB
Sample221215-3g5c8agf2t
SHA256 96b9cd304dd60389dbd4feed81e8bc7712dcfd833049854fb36e35f3db56d6f6
MD5 42bc2047ce57f78f7c093683c021c471
SHA1 8de2a47cf1d0101475bc3641953f95527ff3917f
SHA512 d84a567eab06890e7538813f29e2c49096b71209044aad3bfcca8e0113811ce5119ded8f471e983e459d032a4865d907c390b81f1b90a3fc118785fb289fd1f1
SSDEEP 6144:WXYmNLG7LN3GHZeQoAc/PR+2zLxcH0iPvzpQ6ijLxQFiaI:2q7LMgZAc1LxwxnzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 367KB

file.exe

IMPHASH d134d10c41936619073a08bd546852f7
SHA256 96b9cd304dd60389dbd4feed81e8bc7712dcfd833049854fb36e35f3db56d6f6
MD5 42bc2047ce57f78f7c093683c021c471
SHA1 8de2a47cf1d0101475bc3641953f95527ff3917f
SHA512 d84a567eab06890e7538813f29e2c49096b71209044aad3bfcca8e0113811ce5119ded8f471e983e459d032a4865d907c390b81f1b90a3fc118785fb289fd1f1
SSDEEP 6144:WXYmNLG7LN3GHZeQoAc/PR+2zLxcH0iPvzpQ6ijLxQFiaI:2q7LMgZAc1LxwxnzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18398

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID AddConsoleAliasW GetComputerNameW CreateHardLinkA GetModuleHandleW GetConsoleAliasesA TlsSetValue LoadLibraryW GetCalendarInfoW EnumSystemCodePagesA WriteConsoleW CreateJobObjectA LCMapStringA GetCPInfoExW GetLastError DeleteVolumeMountPointA GetProcAddress VirtualAlloc CreateMemoryResourceNotification WriteConsoleA SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringA VirtualProtect EndUpdateResourceA SetLastError GetConsoleAliasExesA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing