file[.]exe | Triage™

General

Target
file.exe
Size 303KB
Sample221219-wtql9sag3s
SHA256 2c09258485e12aae070248e4f5d1fff79e39d40d4e5df758671dee0e01275a04
MD5 3f59d2149426489cbd6268680de75b1c
SHA1 d1de559efabb9eb3b89ea025e1ba213804acfbe7
SHA512 9c9bb2cf2d8925e3c6390ec5ffd73c9c0244a2fc2823330630140dc449cff68c49cbf9d6226be90a596d5e252bc7790e17710edf867c0036e0db09b170a711dc
SSDEEP 6144:LLB4sA6NVkgNTsAmlmz+3ng+E49HwchLP3i:L6sAKICwnVZH9P3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 303KB

file.exe

IMPHASH 5f8afb9773c94c4f6e844fb54f8f9a55
SHA256 2c09258485e12aae070248e4f5d1fff79e39d40d4e5df758671dee0e01275a04
MD5 3f59d2149426489cbd6268680de75b1c
SHA1 d1de559efabb9eb3b89ea025e1ba213804acfbe7
SHA512 9c9bb2cf2d8925e3c6390ec5ffd73c9c0244a2fc2823330630140dc449cff68c49cbf9d6226be90a596d5e252bc7790e17710edf867c0036e0db09b170a711dc
SSDEEP 6144:LLB4sA6NVkgNTsAmlmz+3ng+E49HwchLP3i:L6sAKICwnVZH9P3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15769

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasExesW TlsSetValue GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer GetConsoleAliasA LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringA VirtualProtect GetCPInfoExA SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList CreateMemoryResourceNotification CreateMutexW GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

user32

GetDC

gdi32

GetCharWidthFloatW

Sharing