file[.]exe | Triage™

General

Target
file.exe
Size 263KB
Sample221207-xnmtvsff86
SHA256 fe7bc500af242e422c882a65db2b9da164536ef06877ee1a8683a4bc70a028e7
MD5 82c3644c3a08816650bb93d7a425c878
SHA1 33b901d21fe5763b62234db395857916caded1d8
SHA512 5a7a7b905df438e055b4dbf35338e4590a2e7403e9c6e404a48e5e2cae6670dcb6010cf0a16d0126c9c6d4059faa5eb72242a57326d8c7f8558759e1a495a2c3
SSDEEP 3072:UaoIfzLWBQ6A9zgv55r+BsSVYN9i4ju+dSlBeVHKAQbpT9RIlf3:Lr2MzsSVYN93tdSCJKV9Bilf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 263KB

file.exe

IMPHASH ba67f15612c7518695f7118637c86f4f
SHA256 fe7bc500af242e422c882a65db2b9da164536ef06877ee1a8683a4bc70a028e7
MD5 82c3644c3a08816650bb93d7a425c878
SHA1 33b901d21fe5763b62234db395857916caded1d8
SHA512 5a7a7b905df438e055b4dbf35338e4590a2e7403e9c6e404a48e5e2cae6670dcb6010cf0a16d0126c9c6d4059faa5eb72242a57326d8c7f8558759e1a495a2c3
SSDEEP 3072:UaoIfzLWBQ6A9zgv55r+BsSVYN9i4ju+dSlBeVHKAQbpT9RIlf3:Lr2MzsSVYN93tdSCJKV9Bilf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27095

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringW SetFileApisToANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileA SetComputerNameA GetWindowsDirectoryA GetModuleHandleW GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeW LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryW VerSetConditionMask GetComputerNameA EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile lstrcmpW FindNextFileA ResetEvent LocalCompact CreateMutexW LocalLock GlobalWire SetCommState WriteConsoleInputW InitAtomTable FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange GetConsoleMode EnumCalendarInfoW GetConsoleAliasExesLengthA MoveFileW InterlockedDecrement GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW GetWindowsDirectoryW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject CopyFileW lstrcpynA WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing