file[.]exe | Triage™

General

Target
file.exe
Size 299KB
Sample221208-r2fd2sdc5v
SHA256 46ebbc17afa1e9e7e86ac13aeb39b2a1e0f866f681d73a5a8a752f5b9c477d5a
MD5 28a9404cda59b75552cb70280f72eb59
SHA1 a6223bd7510699fb95e64238ac1720560cffb4b7
SHA512 ca274e03ff6d25eebd8e880479ba787c21a3c457686aad04200779e06dbcb72170f060a447634bff4239240b1bf623c5fb04c0c5b816a468800ebc4da7e0216c
SSDEEP 3072:c6jB0XPomrV5ML8m/lKNEob4+cDnEdGErk42zwo4823ltF880kDKIJ:cRkBdKNE5+cjEkEw4bXln8XkDKi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH 0f258c672059cc7b87b3fd818b59f4c1
SHA256 46ebbc17afa1e9e7e86ac13aeb39b2a1e0f866f681d73a5a8a752f5b9c477d5a
MD5 28a9404cda59b75552cb70280f72eb59
SHA1 a6223bd7510699fb95e64238ac1720560cffb4b7
SHA512 ca274e03ff6d25eebd8e880479ba787c21a3c457686aad04200779e06dbcb72170f060a447634bff4239240b1bf623c5fb04c0c5b816a468800ebc4da7e0216c
SSDEEP 3072:c6jB0XPomrV5ML8m/lKNEob4+cDnEdGErk42zwo4823ltF880kDKIJ:cRkBdKNE5+cjEkEw4bXln8XkDKi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringW AreFileApisANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasW CreateFileW SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue SetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetNamedPipeHandleStateW WaitForSingleObjectEx GetNamedPipeInfo ZombifyActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject lstrcpynA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

Sharing