file[.]exe | Triage™

General

Target
file.exe
Size 323KB
Sample221207-3hpddsbe31
SHA256 9632e27d643501e3c0dd0b772500c007e7e538317c449d2b682a401550958089
MD5 b63be04bd0d9c85ed6829cc745da6366
SHA1 4eb0d706f6998c369ee4b5d6c718b5e13c26c13f
SHA512 abb9dfc1b03b625fb8d816ecb9ff407e97c411fda139faa8c43d2f625af33d65699d3cc89a831df07b92e79c9bf2622d5de407e89cd2447c3a151360a0ec18a2
SSDEEP 6144:Yns/VU5UjW8SPRXZggc1PbeNk35T3MYjodilf:Yns/W5UjW8SPRXZghDewhJl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 323KB

file.exe

IMPHASH f6b1cc4a194d4686afa7618e5947b526
SHA256 9632e27d643501e3c0dd0b772500c007e7e538317c449d2b682a401550958089
MD5 b63be04bd0d9c85ed6829cc745da6366
SHA1 4eb0d706f6998c369ee4b5d6c718b5e13c26c13f
SHA512 abb9dfc1b03b625fb8d816ecb9ff407e97c411fda139faa8c43d2f625af33d65699d3cc89a831df07b92e79c9bf2622d5de407e89cd2447c3a151360a0ec18a2
SSDEEP 6144:Yns/VU5UjW8SPRXZggc1PbeNk35T3MYjodilf:Yns/W5UjW8SPRXZghDewhJl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27111

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringW SetFileApisToANSI CreateFileA EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileW SetComputerNameA GetWindowsDirectoryW GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameA EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileA GetComputerNameExA GetVolumePathNameW GetShortPathNameW ReadFile lstrcmpW ResetEvent LocalCompact CreateMutexW LocalLock GlobalUnfix SetCommState WriteConsoleInputW InitAtomTable FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoW GetConsoleAliasExesLengthA MoveFileW InterlockedDecrement GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject CopyFileW lstrcpynA WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing