file[.]exe | Triage™

General

Target
file.exe
Size 328KB
Sample221215-pff3cafc8y
SHA256 bbba2eff0954b7c75add6615de79ac5a36c1212495656c660fd584ba8b7e613e
MD5 8bbc2e9b1bbac6477d33830d14c1e9c7
SHA1 223a8b0725bd5a8d467c9fcaed0295918dd7cc32
SHA512 b19a0a2645f2d8b428739cf4e66f087ebf8236905bfc817e6f5aef4e90463897151c7793632fce22b5a822919cbefdf85ef880fb74fed4b2dcbe8eae5d38307a
SSDEEP 6144:PYQ8LJ/f1uToCD+jx8ACMtM0isvzpQ6ijLxQFiaI:Y9/coCD8x8AptMxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH 8d31f3e6175c61e926ce7bdbbde7551f
SHA256 bbba2eff0954b7c75add6615de79ac5a36c1212495656c660fd584ba8b7e613e
MD5 8bbc2e9b1bbac6477d33830d14c1e9c7
SHA1 223a8b0725bd5a8d467c9fcaed0295918dd7cc32
SHA512 b19a0a2645f2d8b428739cf4e66f087ebf8236905bfc817e6f5aef4e90463897151c7793632fce22b5a822919cbefdf85ef880fb74fed4b2dcbe8eae5d38307a
SSDEEP 6144:PYQ8LJ/f1uToCD+jx8ACMtM0isvzpQ6ijLxQFiaI:Y9/coCD8x8AptMxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18430

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW TlsSetValue GlobalAlloc LoadLibraryW GetCalendarInfoW GetConsoleAliasExesLengthW EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW LCMapStringA OpenJobObjectA GetLastError SetLastError VirtualAlloc CreateMemoryResourceNotification WriteConsoleA GetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA VirtualProtect EndUpdateResourceA AddConsoleAliasA GetConsoleAliasesW DeleteVolumeMountPointA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetProcAddress ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

gdi32

GetCharWidthFloatA

Sharing