file[.]exe | Triage™

General

Target
file.exe
Size 305KB
Sample221220-cs1lasge89
SHA256 b1bc71ae3b3f875ff87559e30f790a236d66aedd796fc6ef5ef9d4ca7ecb76da
MD5 33dcec44e69b1618559541e759f1ddc4
SHA1 f95b009ff5c2693e4a24a6da13126d25bca1a80a
SHA512 6dea2019a7dbdcf89defaf93c94d4643302b1db8a8fe5ec4b8f19f14fc20dc3f7295fd748913f2ada9de6be6f7367ff1c629160f97be030fe731669045ceaeee
SSDEEP 3072:mtzFLO+knSEC53QYNxUd0pRHIEkvYj6uREFSCe5FJ1CdjdChZAyy65/1E3ZJyyjM:mFLGSEWNWu/3kvEPEICcs63QZImQKG0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 305KB

file.exe

IMPHASH 2672dcb5d3f18e5d541d0c4a1fc7ed24
SHA256 b1bc71ae3b3f875ff87559e30f790a236d66aedd796fc6ef5ef9d4ca7ecb76da
MD5 33dcec44e69b1618559541e759f1ddc4
SHA1 f95b009ff5c2693e4a24a6da13126d25bca1a80a
SHA512 6dea2019a7dbdcf89defaf93c94d4643302b1db8a8fe5ec4b8f19f14fc20dc3f7295fd748913f2ada9de6be6f7367ff1c629160f97be030fe731669045ceaeee
SSDEEP 3072:mtzFLO+knSEC53QYNxUd0pRHIEkvYj6uREFSCe5FJ1CdjdChZAyy65/1E3ZJyyjM:mFLGSEWNWu/3kvEPEICcs63QZImQKG0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15401

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA MultiByteToWideChar LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer CreateMemoryResourceNotification LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringA CreateMutexA VirtualProtect SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

user32

WindowFromDC

Sharing