file[.]exe | Triage™

General

Target
file.exe
Size 323KB
Sample221207-ptf99saa7v
SHA256 f63d85578f386f7b2c24b7fec97ca672f2d445600c3b4a7a77c787f0d38bc7d2
MD5 44449e93d68f95c988b018cae872fa97
SHA1 2ee68c2bff51a7699eabd5ff0cd44bab920d68e3
SHA512 b986ad3e46d3956f1741b11143df267245a2f393e1dd30e9d1871f5d0930aaa96a9df936fc9650a1f217ec4113456fd836e81a9c01c80c20306654e1516733b8
SSDEEP 6144:KaJUNrS4ISRHjZWBQTqZ2obSDCWcusZ00:KOUlS4hRDUBXk/bcus
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 323KB

file.exe

IMPHASH 0682c0d1f3a8ed113dfb69e1585f6cdf
SHA256 f63d85578f386f7b2c24b7fec97ca672f2d445600c3b4a7a77c787f0d38bc7d2
MD5 44449e93d68f95c988b018cae872fa97
SHA1 2ee68c2bff51a7699eabd5ff0cd44bab920d68e3
SHA512 b986ad3e46d3956f1741b11143df267245a2f393e1dd30e9d1871f5d0930aaa96a9df936fc9650a1f217ec4113456fd836e81a9c01c80c20306654e1516733b8
SSDEEP 6144:KaJUNrS4ISRHjZWBQTqZ2obSDCWcusZ00:KOUlS4hRDUBXk/bcus
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26983

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringA SetFileApisToANSI EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasA CreateFileA SetComputerNameA GetWindowsDirectoryA GetModuleHandleW GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeA CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryW VerSetConditionMask GetComputerNameA EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileW GetComputerNameExW GetVolumePathNameW GetShortPathNameW FlushFileBuffers lstrcmpW MoveFileW FindNextFileW ResetEvent LocalCompact CreateMutexW LocalLock GlobalWire SetCommState WriteConsoleInputA InitAtomTable FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange GetConsoleMode EnumCalendarInfoW GetConsoleFontSize InterlockedDecrement GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointW GetWindowsDirectoryW ClearCommBreak lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject lstrcpynA GetProcessPriorityBoost SetMailslotInfo WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing