file[.]exe | Triage™

General

Target
file.exe
Size 328KB
Sample221215-vf811sch35
SHA256 026e364c84eac1b9dbfa425c36ea5b2160968241d04d46d031a7f4100bd39ba5
MD5 e3ca3f5d63f85741c5cbeb7bd115fbb0
SHA1 f22b410dbf93ae98969ea6dd867c19a66361386e
SHA512 8b9b00c2ae1d2343cf6c4ff2f6c2b0e38423459779f6d8ca3914ef19c2591e56553f782ff9e26ecaa3572d366984a22d316fd4d2a01356c6866fe43fcd51f106
SSDEEP 6144:yYltvLU+9V06mwnXXEj8xR0isvzpQ6ijLxQFiaIN:Rv4+9OwEj8xRxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH 723551a5c3f32ff9b1d1fc4e4db41964
SHA256 026e364c84eac1b9dbfa425c36ea5b2160968241d04d46d031a7f4100bd39ba5
MD5 e3ca3f5d63f85741c5cbeb7bd115fbb0
SHA1 f22b410dbf93ae98969ea6dd867c19a66361386e
SHA512 8b9b00c2ae1d2343cf6c4ff2f6c2b0e38423459779f6d8ca3914ef19c2591e56553f782ff9e26ecaa3572d366984a22d316fd4d2a01356c6866fe43fcd51f106
SSDEEP 6144:yYltvLU+9V06mwnXXEj8xR0isvzpQ6ijLxQFiaIN:Rv4+9OwEj8xRxqzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18606

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID AddConsoleAliasW GetComputerNameW GetModuleHandleW GetConsoleAliasesA TlsSetValue LoadLibraryW GetCalendarInfoW EnumSystemCodePagesA GetConsoleAliasW WriteConsoleW CreateJobObjectA LCMapStringA GetCPInfoExW GetLastError SetLastError DeleteVolumeMountPointA VirtualAlloc CreateMemoryResourceNotification WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringA VirtualProtect EndUpdateResourceA GetProcAddress GetConsoleAliasExesA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetFilePointer TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetConsoleOutputCP MultiByteToWideChar SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringW GetStringTypeA GetStringTypeW GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatA

Sharing