file[.]exe | Triage™

General

Target
file.exe
Size 323KB
Sample221207-mlh3sagg49
SHA256 f2e3d6690bb14457ebd60228e74de5f6494bb3d438a23f6f8b80a4234ec61396
MD5 25cb52042199267a5aa22c606cafec6e
SHA1 cb14b931031c32e38c264233791bdbf0cc541a56
SHA512 809c35e807286f05ebae78fb7acd4d90654dd80eb7664f353357d97576edf4ce29c64c6dc27d27c2fe9c9df2eb757b00e8f220e756fc3e95b72cac35fd043903
SSDEEP 6144:H+I6Mxd4UkjfZlW2FXbZQhNplgzZ0ZE4busZ00:HtjxdvwZY2FXbZ4zT/us
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 323KB

file.exe

IMPHASH 0e07727b7aa043411d3cef91d410684c
SHA256 f2e3d6690bb14457ebd60228e74de5f6494bb3d438a23f6f8b80a4234ec61396
MD5 25cb52042199267a5aa22c606cafec6e
SHA1 cb14b931031c32e38c264233791bdbf0cc541a56
SHA512 809c35e807286f05ebae78fb7acd4d90654dd80eb7664f353357d97576edf4ce29c64c6dc27d27c2fe9c9df2eb757b00e8f220e756fc3e95b72cac35fd043903
SSDEEP 6144:H+I6Mxd4UkjfZlW2FXbZQhNplgzZ0ZE4busZ00:HtjxdvwZY2FXbZ4zT/us
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26999

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringA SetFileApisToANSI EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasA CreateFileA SetComputerNameA GetWindowsDirectoryA GetModuleHandleW GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW SearchPathW MoveFileA CallNamedPipeA GetCurrentDirectoryA GetDriveTypeA CreateMailslotW CommConfigDialogW GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryW VerSetConditionMask GetComputerNameA EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesW GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileW GetComputerNameExW GetVolumePathNameW GetShortPathNameW FlushFileBuffers lstrcmpW MoveFileW FindNextFileW ResetEvent LocalCompact CreateMutexW LocalLock GlobalWire SetCommState WriteConsoleInputA InitAtomTable FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoW GetConsoleFontSize InterlockedDecrement GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointW GetWindowsDirectoryW ClearCommBreak lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject lstrcpynA GetProcessPriorityBoost SetMailslotInfo WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing