file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample221207-vdd3vsae8t
SHA256 9a75f61fd577a3545e4c5abdfa1aca0bd122df23c75351e1572940bcf8a7505e
MD5 dd5e18def7b29c1503d1bc5e4bc65675
SHA1 1c3497bad1e9881e0bcbba62104a71a968b9c04b
SHA512 cc78b256caac443facad522277dcbf85b79a6424278a2b3f8851d35856c2a5bff773710c9666651f61c3e66bf2aca05b718bb68b8123ba27159e22c5b7a1ca32
SSDEEP 6144:o4usZMBLJoMvPazR81pbR1v+BzgyVilf:o4usZsLJbPazeN1vAcl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH ba67f15612c7518695f7118637c86f4f
SHA256 9a75f61fd577a3545e4c5abdfa1aca0bd122df23c75351e1572940bcf8a7505e
MD5 dd5e18def7b29c1503d1bc5e4bc65675
SHA1 1c3497bad1e9881e0bcbba62104a71a968b9c04b
SHA512 cc78b256caac443facad522277dcbf85b79a6424278a2b3f8851d35856c2a5bff773710c9666651f61c3e66bf2aca05b718bb68b8123ba27159e22c5b7a1ca32
SSDEEP 6144:o4usZMBLJoMvPazR81pbR1v+BzgyVilf:o4usZsLJbPazeN1vAcl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27111

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringW SetFileApisToANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileA SetComputerNameA GetWindowsDirectoryA GetModuleHandleW GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeW LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryW VerSetConditionMask GetComputerNameA EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile lstrcmpW FindNextFileA ResetEvent LocalCompact CreateMutexW LocalLock GlobalWire SetCommState WriteConsoleInputW InitAtomTable FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange GetConsoleMode EnumCalendarInfoW GetConsoleAliasExesLengthA MoveFileW InterlockedDecrement GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW GetWindowsDirectoryW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject CopyFileW lstrcpynA WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing