file[.]exe | Triage™

General

Target
file.exe
Size 307KB
Sample221219-j5j8eaee86
SHA256 f1e93555195dc47b7ff991b4d3b4673b36cbcda468ddaa8a07dcc77611490be5
MD5 a96f0e58d628a02a12200abf12643c78
SHA1 4db9eab18a5c16839aa6fa23668b04424a5ae688
SHA512 6eabe50e226a8f77a1a1b501f5bcef7cc00a6685a313eb7b46342d1a6d83ad74b57f6dd61b13539a48d6afacabfdce18a6723a8653db1f7536662126c1b45156
SSDEEP 6144:wYRDxLz6Y+mgD4keLizF56K0iPvzpQ6rFiaI:w036YXg/6KxnzpQ6rF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 307KB

file.exe

IMPHASH ecdf73a961e8abffcc4bde9d197e0535
SHA256 f1e93555195dc47b7ff991b4d3b4673b36cbcda468ddaa8a07dcc77611490be5
MD5 a96f0e58d628a02a12200abf12643c78
SHA1 4db9eab18a5c16839aa6fa23668b04424a5ae688
SHA512 6eabe50e226a8f77a1a1b501f5bcef7cc00a6685a313eb7b46342d1a6d83ad74b57f6dd61b13539a48d6afacabfdce18a6723a8653db1f7536662126c1b45156
SSDEEP 6144:wYRDxLz6Y+mgD4keLizF56K0iPvzpQ6rFiaI:w036YXg/6KxnzpQ6rF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20990

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID AddConsoleAliasW GetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesA GetConsoleAliasExesW LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW CreateJobObjectA LCMapStringA GetCPInfoExW GetLastError GetConsoleAliasA GetProcAddress VirtualAlloc CreateConsoleScreenBuffer CreateMemoryResourceNotification CreateHardLinkW SetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA GetModuleHandleA VirtualProtect EndUpdateResourceA SetLastError TlsGetValue WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer GetStdHandle GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA WriteConsoleA GetConsoleOutputCP SetStdHandle CreateFileA CloseHandle

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing