file[.]exe | Triage™

General

Target
file.exe
Size 304KB
Sample221220-efmj1sgf78
SHA256 36a8ca3f2f677c6150378e425ded931fc35aaacfa1ffdb14f6cf4609a3984285
MD5 65aef6a5b45e2fff0192e1ef8442d36e
SHA1 c9234f00ae445ddd19eb81ee247316d9258cece6
SHA512 2521537f54738497c35599b884d1f041106b2731b651bad2a5e67101dad59fbd6b91813db5a9c99dbf5ec6334bf45687e562b422468d56614e9dad40e2e6e585
SSDEEP 3072:y9zULe+YLEEO550/WYXIxWzCnqtMp4AdKfsCqVoRHDX7Vy65/1E3ZJyyjXgKG0xk:SULGIEp7XImwGZmmT7063QZImQKG0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 304KB

file.exe

IMPHASH 2672dcb5d3f18e5d541d0c4a1fc7ed24
SHA256 36a8ca3f2f677c6150378e425ded931fc35aaacfa1ffdb14f6cf4609a3984285
MD5 65aef6a5b45e2fff0192e1ef8442d36e
SHA1 c9234f00ae445ddd19eb81ee247316d9258cece6
SHA512 2521537f54738497c35599b884d1f041106b2731b651bad2a5e67101dad59fbd6b91813db5a9c99dbf5ec6334bf45687e562b422468d56614e9dad40e2e6e585
SSDEEP 3072:y9zULe+YLEEO550/WYXIxWzCnqtMp4AdKfsCqVoRHDX7Vy65/1E3ZJyyjXgKG0xk:SULGIEp7XImwGZmmT7063QZImQKG0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15401

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA MultiByteToWideChar LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer CreateMemoryResourceNotification LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringA CreateMutexA VirtualProtect SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

user32

WindowFromDC

Sharing