file[.]exe | Triage™

General

Target
file.exe
Size 366KB
Sample221215-l984facb44
SHA256 8fe9b1a112abfaee7e844160b7cd000345d69065e53ce2695359dd90ca079598
MD5 8ecfd65a6f3917c8201c0ef3234bb413
SHA1 65893a486feac8ad9a282da6100300d6b4f5ab61
SHA512 44255e483d9b0559998c0b3b03338453d64fe35ff9301a59b5c4e8e53564393ce58558f5df3c3124aeba3e623edd0d2b12b520249f3cf69322fa6e3efaefd6a5
SSDEEP 6144:PYthXLZ8QyTe/bbZ4tXhfKFKYjbnRSbjfxur/tb:GB98QxfZykFKsbRSbjJurR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 366KB

file.exe

IMPHASH 18399207a8a706ea16a5bd5f8d4e2b30
SHA256 8fe9b1a112abfaee7e844160b7cd000345d69065e53ce2695359dd90ca079598
MD5 8ecfd65a6f3917c8201c0ef3234bb413
SHA1 65893a486feac8ad9a282da6100300d6b4f5ab61
SHA512 44255e483d9b0559998c0b3b03338453d64fe35ff9301a59b5c4e8e53564393ce58558f5df3c3124aeba3e623edd0d2b12b520249f3cf69322fa6e3efaefd6a5
SSDEEP 6144:PYthXLZ8QyTe/bbZ4tXhfKFKYjbnRSbjfxur/tb:GB98QxfZykFKsbRSbjJurR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18746

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA CreateJobObjectW GetUserDefaultLCID GetComputerNameW GetModuleHandleW TlsSetValue GlobalAlloc LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW LCMapStringA EndUpdateResourceW GetLastError SetLastError VirtualAlloc CreateMemoryResourceNotification LoadLibraryA WriteConsoleA GetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA VirtualProtect AddConsoleAliasA GetConsoleAliasesW DeleteVolumeMountPointA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep GetProcAddress ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

gdi32

GetCharWidthFloatA

Sharing