file[.]exe | Triage™

General

Target
file.exe
Size 264KB
Sample221207-29pb2agd99
SHA256 4cf11de4c8f1fdcff73bb05a7642f11633f6229fa0d8cc3f8af551d7300d6dbe
MD5 53598a3584cfa1bcc8c0e84e292e4a9e
SHA1 ef4384e366037f7909b3eb842978081759677c09
SHA512 22a179d925dec85c12e975c1d277f41ce953ac5bf991824804f07bc85cd66ba60ac61649a98ee3106a448ef0c6e9ebbc66aebe0d6cc945c3f5e8b5081641e95d
SSDEEP 3072:Cvz7MKtLZXfsANpq5B54OItuoo+aj2JjEMjdBeVdB9GjO6T9RIlf3:QVs8pJXrEj2JIEat9N6Bilf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 264KB

file.exe

IMPHASH f6b1cc4a194d4686afa7618e5947b526
SHA256 4cf11de4c8f1fdcff73bb05a7642f11633f6229fa0d8cc3f8af551d7300d6dbe
MD5 53598a3584cfa1bcc8c0e84e292e4a9e
SHA1 ef4384e366037f7909b3eb842978081759677c09
SHA512 22a179d925dec85c12e975c1d277f41ce953ac5bf991824804f07bc85cd66ba60ac61649a98ee3106a448ef0c6e9ebbc66aebe0d6cc945c3f5e8b5081641e95d
SSDEEP 3072:Cvz7MKtLZXfsANpq5B54OItuoo+aj2JjEMjdBeVdB9GjO6T9RIlf3:QVs8pJXrEj2JIEat9N6Bilf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27111

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringW SetFileApisToANSI CreateFileA EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileW SetComputerNameA GetWindowsDirectoryW GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameA EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileA GetComputerNameExA GetVolumePathNameW GetShortPathNameW ReadFile lstrcmpW ResetEvent LocalCompact CreateMutexW LocalLock GlobalUnfix SetCommState WriteConsoleInputW InitAtomTable FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoW GetConsoleAliasExesLengthA MoveFileW InterlockedDecrement GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject CopyFileW lstrcpynA WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing