file[.]exe | Triage™

General

Target
file.exe
Size 327KB
Sample221215-kfbqeaca56
SHA256 8fa1be908513b78293ee4ac0450bb9e2230d90d343cc16b07e66cd65878e6da9
MD5 8b83bbe836c5be468504af66b227bb24
SHA1 fec938fb5b1c66b0ef397ca31819929ad0b24519
SHA512 9a8c2303afa97c864cf82c04128dcd5a694b49cd513a24a8e1b052c5075c8ccafdf00c61e7c17eba9d48ed4ad8dcc505d77bdf5597c76e467e13d59264a6a8ff
SSDEEP 6144:8YQ0LZj5dX8alsq4YGMFixRV5/W6nKIIx2Sbjfxur/tb:hNj5dMa1nIxRf/W6nKeSbjJurR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH 18399207a8a706ea16a5bd5f8d4e2b30
SHA256 8fa1be908513b78293ee4ac0450bb9e2230d90d343cc16b07e66cd65878e6da9
MD5 8b83bbe836c5be468504af66b227bb24
SHA1 fec938fb5b1c66b0ef397ca31819929ad0b24519
SHA512 9a8c2303afa97c864cf82c04128dcd5a694b49cd513a24a8e1b052c5075c8ccafdf00c61e7c17eba9d48ed4ad8dcc505d77bdf5597c76e467e13d59264a6a8ff
SSDEEP 6144:8YQ0LZj5dX8alsq4YGMFixRV5/W6nKIIx2Sbjfxur/tb:hNj5dMa1nIxRf/W6nKeSbjJurR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18746

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA CreateJobObjectW GetUserDefaultLCID GetComputerNameW GetModuleHandleW TlsSetValue GlobalAlloc LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW LCMapStringA EndUpdateResourceW GetLastError SetLastError VirtualAlloc CreateMemoryResourceNotification LoadLibraryA WriteConsoleA GetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA VirtualProtect AddConsoleAliasA GetConsoleAliasesW DeleteVolumeMountPointA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep GetProcAddress ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

gdi32

GetCharWidthFloatA

Sharing