file[.]exe | Triage™

General

Target
file.exe
Size 306KB
Sample221219-jxpg6aee76
SHA256 cf17ff7d876b8062cf4d8f86e03bf7b0615e318fe70085b83ea0504bc81b4f56
MD5 5c696554db967299d87d1e3eabef8ede
SHA1 4759ae3621223fff1e8704a3a9e56abe0964e85b
SHA512 678a17ab7d9d88fdadee079607c6b9968203eaeb593329bc57893d1cc0033cceb792e4c1e41fd0e1efd42ce93e37bad92c8cd72db8661a594579ce580e13c863
SSDEEP 6144:AAkeLidoyboiF5KTMJazdz87r2qRJ0iPvzpQ6rFiaI:ASOdoytF5uq7aMJxnzpQ6rF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 306KB

file.exe

IMPHASH ecdf73a961e8abffcc4bde9d197e0535
SHA256 cf17ff7d876b8062cf4d8f86e03bf7b0615e318fe70085b83ea0504bc81b4f56
MD5 5c696554db967299d87d1e3eabef8ede
SHA1 4759ae3621223fff1e8704a3a9e56abe0964e85b
SHA512 678a17ab7d9d88fdadee079607c6b9968203eaeb593329bc57893d1cc0033cceb792e4c1e41fd0e1efd42ce93e37bad92c8cd72db8661a594579ce580e13c863
SSDEEP 6144:AAkeLidoyboiF5KTMJazdz87r2qRJ0iPvzpQ6rFiaI:ASOdoytF5uq7aMJxnzpQ6rF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20990

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID AddConsoleAliasW GetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesA GetConsoleAliasExesW LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW CreateJobObjectA LCMapStringA GetCPInfoExW GetLastError GetConsoleAliasA GetProcAddress VirtualAlloc CreateConsoleScreenBuffer CreateMemoryResourceNotification CreateHardLinkW SetProcessWorkingSetSize SetThreadIdealProcessor FoldStringA GetModuleHandleA VirtualProtect EndUpdateResourceA SetLastError TlsGetValue WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer GetStdHandle GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA WriteConsoleA GetConsoleOutputCP SetStdHandle CreateFileA CloseHandle

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing