file[.]exe | Triage™

General

Target
file.exe
Size 333KB
Sample221216-dcsq7aea37
SHA256 c5697208b41e075bc413064da73c13ce14648eef28db1070c88e0803a6824c73
MD5 b1b2ca9470c59eb5f811fc2648fd8d25
SHA1 dc17e148c2290e47040eedcd86e84da36fa29db3
SHA512 617188e499f45ea94059922101a22a317ac3480dbc33874c1b67a16ad5a341bd3f2feead7fbbe23dd297a9d6e3db0666c6d8196a405c0fda77dafa9f623e62e2
SSDEEP 6144:EqY1kLWTJ9nVnReE942ggJ/V+0iPvzpQ6ijLxQFiaI:ckgJhVnReE9ZfZ0xnzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 333KB

file.exe

IMPHASH 2067eb05796787c0f2b3dc09403197ee
SHA256 c5697208b41e075bc413064da73c13ce14648eef28db1070c88e0803a6824c73
MD5 b1b2ca9470c59eb5f811fc2648fd8d25
SHA1 dc17e148c2290e47040eedcd86e84da36fa29db3
SHA512 617188e499f45ea94059922101a22a317ac3480dbc33874c1b67a16ad5a341bd3f2feead7fbbe23dd297a9d6e3db0666c6d8196a405c0fda77dafa9f623e62e2
SSDEEP 6144:EqY1kLWTJ9nVnReE942ggJ/V+0iPvzpQ6ijLxQFiaI:ckgJhVnReE9ZfZ0xnzpQ6ijqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21198

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID AddConsoleAliasW GetComputerNameW CreateHardLinkA GetModuleHandleW GetConsoleAliasesA LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW CreateJobObjectA LCMapStringA GetCPInfoExW GetLastError GetConsoleAliasExesA GetProcAddress VirtualAlloc CreateMemoryResourceNotification WriteConsoleA SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringA VirtualProtect EndUpdateResourceA SetLastError TlsGetValue WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleOutputCP SetStdHandle CreateFileA CloseHandle GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing