file[.]exe | Triage™

General

Target
file.exe
Size 304KB
Sample221220-dp65cabf9z
SHA256 817dfc007a769fecc2a62844cbaf1a5d59021bd4f7c05ba99e1a80bb3b7171c7
MD5 97c18b3be7d2b758c702ecca9555bd64
SHA1 5718cc0b2ac9a7f6aae4446b2af26429c69a2aa4
SHA512 357fc326f2a752e748fa9782ab851c54fbe9f3aa068730ca049296808fb4d7c4b2626f7e604579e5e7a9371f75faca1e0740c312d1666f5110da9849d09b9a84
SSDEEP 6144:yjLXsESO+w+04/Jm3CPT4G7gYPoA4a63QZImQKG0:cLsEI9JyET4kgYQAMQZW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 304KB

file.exe

IMPHASH 2672dcb5d3f18e5d541d0c4a1fc7ed24
SHA256 817dfc007a769fecc2a62844cbaf1a5d59021bd4f7c05ba99e1a80bb3b7171c7
MD5 97c18b3be7d2b758c702ecca9555bd64
SHA1 5718cc0b2ac9a7f6aae4446b2af26429c69a2aa4
SHA512 357fc326f2a752e748fa9782ab851c54fbe9f3aa068730ca049296808fb4d7c4b2626f7e604579e5e7a9371f75faca1e0740c312d1666f5110da9849d09b9a84
SSDEEP 6144:yjLXsESO+w+04/Jm3CPT4G7gYPoA4a63QZImQKG0:cLsEI9JyET4kgYQAMQZW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15401

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA MultiByteToWideChar LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer CreateMemoryResourceNotification LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringA CreateMutexA VirtualProtect SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

user32

WindowFromDC

Sharing