file[.]exe | Triage™

General

Target
file.exe
Size 306KB
Sample221219-15m3qsbd3x
SHA256 f1044c8782f2a56051b9bf3cdcda84cbbfb61305806b45bc9c3a3d6aa19772fb
MD5 212600ff072917c82f4816954ef8e0b8
SHA1 426a573a2edc139ede2612920d9b2d5cb05258a4
SHA512 6140e6f2f7bc8ca22942084f681b81d98efd776022b485a0140294951904fa164b526bb198c624af3081efa0433d64a2bdd7f6e6d508e29921943a089a39cdb8
SSDEEP 3072:MRLy+xfYzM95DYlmWDLXyGXXz9dQ4gcBUm2Iv9IVJHNbD7Wy65/1E3ZJyyjXgKGC:qLrwM2J7XXz9PBvrKtTD63QZImQKG0f
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 306KB

file.exe

IMPHASH ae60619fb081a38c1a6ce70c8c5acd08
SHA256 f1044c8782f2a56051b9bf3cdcda84cbbfb61305806b45bc9c3a3d6aa19772fb
MD5 212600ff072917c82f4816954ef8e0b8
SHA1 426a573a2edc139ede2612920d9b2d5cb05258a4
SHA512 6140e6f2f7bc8ca22942084f681b81d98efd776022b485a0140294951904fa164b526bb198c624af3081efa0433d64a2bdd7f6e6d508e29921943a089a39cdb8
SSDEEP 3072:MRLy+xfYzM95DYlmWDLXyGXXz9dQ4gcBUm2Iv9IVJHNbD7Wy65/1E3ZJyyjXgKGC:qLrwM2J7XXz9PBvrKtTD63QZImQKG0f
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16329

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA MultiByteToWideChar LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer GetUserDefaultLCID LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringA CreateMutexA VirtualProtect SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList CreateMemoryResourceNotification GetConsoleAliasA GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing