file[.]exe | Triage™

General

Target
file.exe
Size 304KB
Sample221220-e8s79sgf98
SHA256 985af931a6bac3594c8c9ca7dc269c8afea84d83bf0ee8bd1527752a38f558bf
MD5 e6b3c545694f1a74bfe5e5e199bc3ab3
SHA1 4e50e6fe02d5f357c861681bff34f8c3e7741689
SHA512 b47720659d832f027583ef33cebad3e4ddba951523e0f96486fb6a888fd7ab34194118c46b446b6196f7cb26dcbe0ac2fd090daaabb900bb9aded808eba3d835
SSDEEP 6144:OFLxGEmqmKVLNx4uLyA7BUDDdxyCR63QZImQKG0:qVGEmil4MyA7ADLyzQZW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 304KB

file.exe

IMPHASH 2672dcb5d3f18e5d541d0c4a1fc7ed24
SHA256 985af931a6bac3594c8c9ca7dc269c8afea84d83bf0ee8bd1527752a38f558bf
MD5 e6b3c545694f1a74bfe5e5e199bc3ab3
SHA1 4e50e6fe02d5f357c861681bff34f8c3e7741689
SHA512 b47720659d832f027583ef33cebad3e4ddba951523e0f96486fb6a888fd7ab34194118c46b446b6196f7cb26dcbe0ac2fd090daaabb900bb9aded808eba3d835
SSDEEP 6144:OFLxGEmqmKVLNx4uLyA7BUDDdxyCR63QZImQKG0:qVGEmil4MyA7ADLyzQZW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15401

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA MultiByteToWideChar LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer CreateMemoryResourceNotification LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringA CreateMutexA VirtualProtect SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

user32

WindowFromDC

Sharing