file[.]exe | Triage™

General

Target
file.exe
Size 302KB
Sample221219-vxjsfsfe65
SHA256 e6d47e67d8e304e3ca4aa4fca5f14c1e93a8b07c15236f1b14f82a719e692628
MD5 a013396a2fb63508fc598bce7d4d61b9
SHA1 f117f58b485bbaedb42841ecc07c1562f1300bf5
SHA512 33d1f93016aac6b90f869fb89b58fc5dab0d99744cd330e138162de088fe5dca25b5ebb9c53ee4980eeb80f7c6c7c2f37655498fd4f25259b94caa362d48ca19
SSDEEP 6144:NLN0Wze5b5c4CklcCFSCroz+3ng+E49HwchLP3i:N501ldCkcnnwnVZH9P3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 302KB

file.exe

IMPHASH 66ba2936960f0bfc981ec06fb5daee6d
SHA256 e6d47e67d8e304e3ca4aa4fca5f14c1e93a8b07c15236f1b14f82a719e692628
MD5 a013396a2fb63508fc598bce7d4d61b9
SHA1 f117f58b485bbaedb42841ecc07c1562f1300bf5
SHA512 33d1f93016aac6b90f869fb89b58fc5dab0d99744cd330e138162de088fe5dca25b5ebb9c53ee4980eeb80f7c6c7c2f37655498fd4f25259b94caa362d48ca19
SSDEEP 6144:NLN0Wze5b5c4CklcCFSCroz+3ng+E49HwchLP3i:N501ldCkcnnwnVZH9P3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19983

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA GetConsoleAliasA GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasExesW GetCalendarInfoW EnumSystemCodePagesA LCMapStringA GetConsoleAliasesW GetCPInfoExW GetLastError GetProcAddress VirtualAlloc TlsGetValue CreateMemoryResourceNotification LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringA VirtualProtect SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList CreateConsoleScreenBuffer CreateMutexW WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetModuleHandleA

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing