file[.]exe | Triage™

General

Target
file.exe
Size 304KB
Sample221220-ejhegabg51
SHA256 c754c792ea1bc355e56e2f73a43e140aac86a3ee932aa26232be9adc198f2e6a
MD5 c249bfd38a2d402e8aced7e32228d587
SHA1 21e23533faef2b026a7ede6a733672d7e1aab384
SHA512 d5a325c074c4314248fb76d0f78d8fdb6a8361037bc8e6a06f5b8ad1579b20556361d71f56386ea49d683bb0dfcef7de16a9e6df16be8bbb235cc5a37b78452a
SSDEEP 3072:uQzsLO+ZnsES5vNtwitdaw6uZNPUWhvP+etF1EU6VQ5y65/1E3ZJyyjXgKG0xOKs:tsLvsEStEuP7vPblEU6j63QZImQKG0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 304KB

file.exe

IMPHASH 2672dcb5d3f18e5d541d0c4a1fc7ed24
SHA256 c754c792ea1bc355e56e2f73a43e140aac86a3ee932aa26232be9adc198f2e6a
MD5 c249bfd38a2d402e8aced7e32228d587
SHA1 21e23533faef2b026a7ede6a733672d7e1aab384
SHA512 d5a325c074c4314248fb76d0f78d8fdb6a8361037bc8e6a06f5b8ad1579b20556361d71f56386ea49d683bb0dfcef7de16a9e6df16be8bbb235cc5a37b78452a
SSDEEP 3072:uQzsLO+ZnsES5vNtwitdaw6uZNPUWhvP+etF1EU6VQ5y65/1E3ZJyyjXgKG0xOKs:tsLvsEStEuP7vPblEU6j63QZImQKG0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15401

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetUserDefaultLCID GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA MultiByteToWideChar LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer CreateMemoryResourceNotification LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringA CreateMutexA VirtualProtect SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetModuleHandleA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

user32

WindowFromDC

Sharing