file[.]exe | Triage™

General

Target
file.exe
Size 329KB
Sample221215-ts35vscg69
SHA256 31b37e5d8a177454e488d85fa635f446878a43617d2658759d90548bdc3e403c
MD5 f4b13ff5f6d5af7ae828a1fa723eb9fb
SHA1 6953816a1d57c58cd63aba0ac7bdadb8f5b68031
SHA512 06ae2f24b2c4dcad9d4f7ecc86e4eea05e0de2056413b737082931f80598d130b7d10b074410928828eec646dc2afd541abb1ebde67e52157d01f876c128815e
SSDEEP 6144:zYpSLfcLeeRWugVak1uLf3h0isvzpQ6ijLxQFiaIN:57cLeeRD0ETRxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 329KB

file.exe

IMPHASH 723551a5c3f32ff9b1d1fc4e4db41964
SHA256 31b37e5d8a177454e488d85fa635f446878a43617d2658759d90548bdc3e403c
MD5 f4b13ff5f6d5af7ae828a1fa723eb9fb
SHA1 6953816a1d57c58cd63aba0ac7bdadb8f5b68031
SHA512 06ae2f24b2c4dcad9d4f7ecc86e4eea05e0de2056413b737082931f80598d130b7d10b074410928828eec646dc2afd541abb1ebde67e52157d01f876c128815e
SSDEEP 6144:zYpSLfcLeeRWugVak1uLf3h0isvzpQ6ijLxQFiaIN:57cLeeRD0ETRxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18606

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID AddConsoleAliasW GetComputerNameW GetModuleHandleW GetConsoleAliasesA TlsSetValue LoadLibraryW GetCalendarInfoW EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW CreateJobObjectA LCMapStringA GetCPInfoExW GetLastError SetLastError DeleteVolumeMountPointA VirtualAlloc CreateMemoryResourceNotification WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringA VirtualProtect EndUpdateResourceA GetProcAddress GetConsoleAliasExesA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatA

Sharing