file[.]exe | Triage™

General

Target
file.exe
Size 330KB
Sample221222-grflysdh97
SHA256 8c85584f1fdc8bf428d2110e73b51f05e1d64f29873509e1b8cacc25420f6f2b
MD5 f893fb779905b795bd58d0226994c29b
SHA1 6f3d86f4a355ee4539f765ce9022a183d1d19d34
SHA512 7398dfee4c6b0940059c9cff703809d99a9b04d1266bc9d46ca00843a6ad8f771fb834414f6c85a343839949694c8d49e3e83fe1c89351422570a47d08aa369c
SSDEEP 6144:ei4GLb3qbWQc3WKFgid+Ow61hJFIJfVAVrwU+:ZL/6bWvGKS6PHgtyQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 330KB

file.exe

IMPHASH 5dec9faec795e0b53dd54af3b031c7fd
SHA256 8c85584f1fdc8bf428d2110e73b51f05e1d64f29873509e1b8cacc25420f6f2b
MD5 f893fb779905b795bd58d0226994c29b
SHA1 6f3d86f4a355ee4539f765ce9022a183d1d19d34
SHA512 7398dfee4c6b0940059c9cff703809d99a9b04d1266bc9d46ca00843a6ad8f771fb834414f6c85a343839949694c8d49e3e83fe1c89351422570a47d08aa369c
SSDEEP 6144:ei4GLb3qbWQc3WKFgid+Ow61hJFIJfVAVrwU+:ZL/6bWvGKS6PHgtyQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15988

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW CreateHardLinkA GetModuleHandleW GetTickCount GetConsoleAliasExesW TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode MultiByteToWideChar GetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer GetUserDefaultLCID VirtualAllocEx LoadLibraryA WriteConsoleA SetProcessWorkingSetSize FoldStringW FoldStringA CreateMutexA SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList LCMapStringW CreateMemoryResourceNotification GetConsoleAliasA Sleep ExitProcess GetStartupInfoW HeapAlloc ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc SetFilePointer SetStdHandle RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetModuleHandleA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW CreateFileA

user32

WindowFromDC

advapi32

RegQueryInfoKeyW

Sharing