file[.]exe | Triage™

General

Target
file.exe
Size 311KB
Sample221219-rtj29sfc33
SHA256 eeaadb6bda0816a67ce1750b68a4a876a16dc32e3762713924cc8daba44fd000
MD5 c2f36bb8bc70c31e02d50c64052f6378
SHA1 14106b3e93a95969080c25b8e6214ae7b6790a9f
SHA512 1a327bb72c23e48ca80b704de8f52380b1eebb9b46af46fee6d5f056f806651bc67b03785dedefcea81d34f18b7c4d0df93c380f42544292c35fed4c8f6fa568
SSDEEP 6144:mYH6LXKghvbkfqPCNTXGml9yVeKNTH4rWlRjO1n:mYarKgtbkf4CnyVtN8rW9u
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 311KB

file.exe

IMPHASH d3b592cd9481e4f053b5362e22d61595
SHA256 eeaadb6bda0816a67ce1750b68a4a876a16dc32e3762713924cc8daba44fd000
MD5 c2f36bb8bc70c31e02d50c64052f6378
SHA1 14106b3e93a95969080c25b8e6214ae7b6790a9f
SHA512 1a327bb72c23e48ca80b704de8f52380b1eebb9b46af46fee6d5f056f806651bc67b03785dedefcea81d34f18b7c4d0df93c380f42544292c35fed4c8f6fa568
SSDEEP 6144:mYH6LXKghvbkfqPCNTXGml9yVeKNTH4rWlRjO1n:mYarKgtbkf4CnyVtN8rW9u
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21118

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID AddConsoleAliasW GetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasExesW LoadLibraryW GetCalendarInfoA DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW CreateJobObjectA LCMapStringA GetConsoleAliasesW GetCPInfoExW GetLastError GetProcAddress GetConsoleAliasA CreateConsoleScreenBuffer CreateMemoryResourceNotification LoadLibraryA WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize FoldStringA VirtualProtect SetThreadAffinityMask EndUpdateResourceA GetConsoleProcessList VirtualAlloc TlsGetValue WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleOutputCP SetStdHandle CreateFileA CloseHandle GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing