file[.]exe | Triage™

General

Target
file.exe
Size 328KB
Sample221215-sn192acf62
SHA256 474fbed6c90712dde842399b9bf197bf8dadf5e8e797495e222940eb25db3c14
MD5 0144d321f258f16e25fda8db105b49b6
SHA1 24f476ebf3bcc2b75a0c4e8095862b89faf649c7
SHA512 7c8d370d2e6c25b2e885e707a81ddbd7c2e69329f31fd37ec65ab803c09248b994bf84033bdd5ec23e28cb950935686580f7a98ed18f1c5c3b0e973dfa63fa09
SSDEEP 6144:NYMSLtYM41kNAzNGQOwgbUE7BaWiUb0isvzpQ6ijLxQFiaI:OBY51kN6LdQLumxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH 7b101c6f202aa6db14b4ce6dc7d7a96e
SHA256 474fbed6c90712dde842399b9bf197bf8dadf5e8e797495e222940eb25db3c14
MD5 0144d321f258f16e25fda8db105b49b6
SHA1 24f476ebf3bcc2b75a0c4e8095862b89faf649c7
SHA512 7c8d370d2e6c25b2e885e707a81ddbd7c2e69329f31fd37ec65ab803c09248b994bf84033bdd5ec23e28cb950935686580f7a98ed18f1c5c3b0e973dfa63fa09
SSDEEP 6144:NYMSLtYM41kNAzNGQOwgbUE7BaWiUb0isvzpQ6ijLxQFiaI:OBY51kN6LdQLumxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18638

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetUserDefaultLCID AddConsoleAliasW GetComputerNameW GetModuleHandleW GetConsoleAliasesA TlsSetValue LoadLibraryW GetCalendarInfoA EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW LCMapStringA GetLastError SetLastError DeleteVolumeMountPointA VirtualAlloc CreateMemoryResourceNotification WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringW VirtualProtect EndUpdateResourceA GetProcAddress GetConsoleAliasExesA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatA

Sharing