file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample221207-r5ayqsfb86
SHA256 be42aa1ebca934882b95a2ff7656568000df0cc537710011e5316265da67ca31
MD5 0808cc3004a72880dd2b8a8976fe47aa
SHA1 38b6c1db3e725da3d38f01f29674763504c3c68c
SHA512 1483336f06ed52643d56d89ba4ece8da7c5d9ac55151a2febef97c99428f4e4b93ee44283214ab7aaa92de3492166a07dc06fa7f3447a1e82beee99a082ea727
SSDEEP 3072:8yr85bLPdeoabsN9H5W2o03ehvJ7iCEXzaOlVEaG9C3xvH9PUEAx6M9BeV6mkxVP:8D8s/omSR7k5aaa8Nc6M6BkfLEilf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH d232cd889354f069585194088585c52d
SHA256 be42aa1ebca934882b95a2ff7656568000df0cc537710011e5316265da67ca31
MD5 0808cc3004a72880dd2b8a8976fe47aa
SHA1 38b6c1db3e725da3d38f01f29674763504c3c68c
SHA512 1483336f06ed52643d56d89ba4ece8da7c5d9ac55151a2febef97c99428f4e4b93ee44283214ab7aaa92de3492166a07dc06fa7f3447a1e82beee99a082ea727
SSDEEP 3072:8yr85bLPdeoabsN9H5W2o03ehvJ7iCEXzaOlVEaG9C3xvH9PUEAx6M9BeV6mkxVP:8D8s/omSR7k5aaa8Nc6M6BkfLEilf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27047

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringA SetFileApisToANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileA SetComputerNameA GetWindowsDirectoryA GetModuleHandleW GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryW VerSetConditionMask GetComputerNameA EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileW GetComputerNameExW GetVolumePathNameW GetShortPathNameW FlushFileBuffers lstrcmpW MoveFileW FindNextFileW ResetEvent LocalCompact CreateMutexW LocalLock GlobalWire SetCommState WriteConsoleInputA InitAtomTable FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange GetConsoleMode EnumCalendarInfoW GetConsoleFontSize InterlockedDecrement GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointW GetWindowsDirectoryW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject lstrcpynA GetProcessPriorityBoost SetMailslotInfo WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing