file[.]exe | Triage™

General

Target
file.exe
Size 367KB
Sample221215-m3d56acb93
SHA256 aef5f37c4670d8a9be061f2f268cce170a024a6a15218849ee3fa2595ebff64e
MD5 b2bb96a6c6ff2b875504d83c4ab62547
SHA1 b4a120203568c598e47510ded1281cf930a86c13
SHA512 9189e5cbc8aae8ab19a125133b456b2a2e60f38d5d5ee82ddb697f5ec1f7686928b01e4556865abf06435532757b838caffa190eccebea26ef5f446937a7156c
SSDEEP 6144:0YCh7LAgr3j20Gaq+o8irC1c0zcNue0isvzpQ6ijLxQFiaI:yxkgnDo8id0zcNuexqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 367KB

file.exe

IMPHASH 8d31f3e6175c61e926ce7bdbbde7551f
SHA256 aef5f37c4670d8a9be061f2f268cce170a024a6a15218849ee3fa2595ebff64e
MD5 b2bb96a6c6ff2b875504d83c4ab62547
SHA1 b4a120203568c598e47510ded1281cf930a86c13
SHA512 9189e5cbc8aae8ab19a125133b456b2a2e60f38d5d5ee82ddb697f5ec1f7686928b01e4556865abf06435532757b838caffa190eccebea26ef5f446937a7156c
SSDEEP 6144:0YCh7LAgr3j20Gaq+o8irC1c0zcNue0isvzpQ6ijLxQFiaI:yxkgnDo8id0zcNuexqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18430

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW TlsSetValue GlobalAlloc LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW LCMapStringA OpenJobObjectA GetLastError SetLastError VirtualAlloc CreateMemoryResourceNotification WriteConsoleA GetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA VirtualProtect EndUpdateResourceA AddConsoleAliasA GetConsoleAliasesW DeleteVolumeMountPointA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetProcAddress ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

gdi32

GetCharWidthFloatA

Sharing