file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample221208-h6nrjscc2y
SHA256 425608cd7abc8902204a42ab2c7280915471c1bdcc4d49ff06e7d5a1635e5997
MD5 c0511310638e1eafb67360ceef27a1f4
SHA1 8f0a06af221168cb8fc82e8404ae4b28911aa9cf
SHA512 a71c25b8b7f1947d23e62ae6d149733d4526ebcf96a8f195b0c471c53a17cb31e39ce07515afde681bf9554690feb1ef8c59a4f3bca2bce7bdf92045c885c7f1
SSDEEP 6144:y7ytRPCmgwfo/YkJGkf4qmLoq4tz3+Fpxm:y+tqrQkf4qmU9l3U
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 7bbde0f8d9a559b7a0a82e9596097da8
SHA256 425608cd7abc8902204a42ab2c7280915471c1bdcc4d49ff06e7d5a1635e5997
MD5 c0511310638e1eafb67360ceef27a1f4
SHA1 8f0a06af221168cb8fc82e8404ae4b28911aa9cf
SHA512 a71c25b8b7f1947d23e62ae6d149733d4526ebcf96a8f195b0c471c53a17cb31e39ce07515afde681bf9554690feb1ef8c59a4f3bca2bce7bdf92045c885c7f1
SSDEEP 6144:y7ytRPCmgwfo/YkJGkf4qmLoq4tz3+Fpxm:y+tqrQkf4qmU9l3U
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27207

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringW SetFileApisToANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileW SetComputerNameA GetSystemWindowsDirectoryW GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue SetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameA EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileA GetComputerNameExA GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalCompact MoveFileW CreateMutexW LocalLock GlobalUnfix SetCommState WriteConsoleInputW InitAtomTable FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoW GetConsoleAliasExesLengthA GetConsoleFontSize InterlockedDecrement GetNamedPipeHandleStateW WaitForSingleObjectEx GetNamedPipeInfo DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject CopyFileW lstrcpynA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing