file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample221207-2tdwcsbd71
SHA256 160af97e68142c8ed61b395e43beda19186a513a1e96d5d282be377c3ef92fe7
MD5 83d7560e37c5a2d3f891e0a568279005
SHA1 a941483be8ea1e189f1111f9858322c88d94e8a8
SHA512 17191a92442b1dd9675d7b3b9a583e8c34927df274d4bf7b6e15282d251ead2ba66ca935e9b88657f6a3aa84591faab5edcb996a6fa250f1f92725bbc3c11a3f
SSDEEP 6144:Flhks4l76HF0PVP9ZKQVgcxH+s/5zN8Eilf:Flqs4xVVbxH+WN6l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH f6b1cc4a194d4686afa7618e5947b526
SHA256 160af97e68142c8ed61b395e43beda19186a513a1e96d5d282be377c3ef92fe7
MD5 83d7560e37c5a2d3f891e0a568279005
SHA1 a941483be8ea1e189f1111f9858322c88d94e8a8
SHA512 17191a92442b1dd9675d7b3b9a583e8c34927df274d4bf7b6e15282d251ead2ba66ca935e9b88657f6a3aa84591faab5edcb996a6fa250f1f92725bbc3c11a3f
SSDEEP 6144:Flhks4l76HF0PVP9ZKQVgcxH+s/5zN8Eilf:Flqs4xVVbxH+WN6l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27111

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringW SetFileApisToANSI CreateFileA EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileW SetComputerNameA GetWindowsDirectoryW GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameA EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileA GetComputerNameExA GetVolumePathNameW GetShortPathNameW ReadFile lstrcmpW ResetEvent LocalCompact CreateMutexW LocalLock GlobalUnfix SetCommState WriteConsoleInputW InitAtomTable FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoW GetConsoleAliasExesLengthA MoveFileW InterlockedDecrement GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject CopyFileW lstrcpynA WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing