file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample221208-j7bdaahd45
SHA256 f3a9022b045cf24b4726b310a1094624ffc40f705b628f283cf4e3e2e4db2942
MD5 3af74e7d1b0146cc9a83de025c98ace1
SHA1 9046dc3fb167e980d9aef629241738aab2101473
SHA512 41a70fc9be3dd596847b41c0111fb858762822c1a154d76240ad94675d3b627e3477ba60934d92d130372b4887b91b27facb790e6f13fe1d5a805b23875f3f7e
SSDEEP 6144:csNWpaZiU7MYb41aK6xqJ7NLsUs2s8xm:csNWcZZMYM1aK4qTS2s
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 7bbde0f8d9a559b7a0a82e9596097da8
SHA256 f3a9022b045cf24b4726b310a1094624ffc40f705b628f283cf4e3e2e4db2942
MD5 3af74e7d1b0146cc9a83de025c98ace1
SHA1 9046dc3fb167e980d9aef629241738aab2101473
SHA512 41a70fc9be3dd596847b41c0111fb858762822c1a154d76240ad94675d3b627e3477ba60934d92d130372b4887b91b27facb790e6f13fe1d5a805b23875f3f7e
SSDEEP 6144:csNWpaZiU7MYb41aK6xqJ7NLsUs2s8xm:csNWcZZMYM1aK4qTS2s
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27207

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringW SetFileApisToANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileW SetComputerNameA GetSystemWindowsDirectoryW GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue SetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameA EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileA GetComputerNameExA GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalCompact MoveFileW CreateMutexW LocalLock GlobalUnfix SetCommState WriteConsoleInputW InitAtomTable FindResourceW GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoW GetConsoleAliasExesLengthA GetConsoleFontSize InterlockedDecrement GetNamedPipeHandleStateW WaitForSingleObjectEx GetNamedPipeInfo DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject CopyFileW lstrcpynA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing