file[.]exe | Triage™

General

Target
file.exe
Size 427KB
Sample221215-n71qdscc68
SHA256 35799208aef820556e9cf7f652d4ae8e0802bf48a28e725107b7ce59a8fcaf9e
MD5 16e87216b28fdc510f7967fb6b8ee393
SHA1 5b4c54f3da3f137162c9bdd4c7ffd07cce310221
SHA512 43df85d5789f50b1bdf4945b691c8874abba457c3df018fb8cdf845dbdcf84265f791061bc51d69a7814ec33d688351caa7ebdc7ff3728672f02ae0f49c2ce67
SSDEEP 6144:fYe+LNm0aVebPMm5awsXlb97ZwM9vU9onkI0isvzpQ6ijLxQFiaI:UJmPikmJQr9s9lIxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 427KB

file.exe

IMPHASH 8d31f3e6175c61e926ce7bdbbde7551f
SHA256 35799208aef820556e9cf7f652d4ae8e0802bf48a28e725107b7ce59a8fcaf9e
MD5 16e87216b28fdc510f7967fb6b8ee393
SHA1 5b4c54f3da3f137162c9bdd4c7ffd07cce310221
SHA512 43df85d5789f50b1bdf4945b691c8874abba457c3df018fb8cdf845dbdcf84265f791061bc51d69a7814ec33d688351caa7ebdc7ff3728672f02ae0f49c2ce67
SSDEEP 6144:fYe+LNm0aVebPMm5awsXlb97ZwM9vU9onkI0isvzpQ6ijLxQFiaI:UJmPikmJQr9s9lIxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18430

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW TlsSetValue GlobalAlloc LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW LCMapStringA OpenJobObjectA GetLastError SetLastError VirtualAlloc CreateMemoryResourceNotification WriteConsoleA GetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA VirtualProtect EndUpdateResourceA AddConsoleAliasA GetConsoleAliasesW DeleteVolumeMountPointA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetProcAddress ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

gdi32

GetCharWidthFloatA

Sharing