file[.]exe | Triage™

General

Target
file.exe
Size 299KB
Sample221208-swbpcadd4t
SHA256 50b4fd877978108f4e1944e3b46fa68b9cdf5e40752e9fe366d9a8fcff5e9404
MD5 7424cd5e31d2be7c76c17bec9959b143
SHA1 6c02b84531ed4e684bc54eb69577622eb8fa2359
SHA512 42271be2f94ac930c62eacdb8d3d9f759b28203718063a2d8d2099ed87756649f0c943377bf69b17201ba3f7c0759ed4b909b65ea325e784203bbd0ef7105884
SSDEEP 6144:mdvfVOyr76W0tB8tr4qT6WDXv0DSLpgu492XBVC3XkDKi:mdXnr7KB8t9dD/0DSLY0C
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH 0f258c672059cc7b87b3fd818b59f4c1
SHA256 50b4fd877978108f4e1944e3b46fa68b9cdf5e40752e9fe366d9a8fcff5e9404
MD5 7424cd5e31d2be7c76c17bec9959b143
SHA1 6c02b84531ed4e684bc54eb69577622eb8fa2359
SHA512 42271be2f94ac930c62eacdb8d3d9f759b28203718063a2d8d2099ed87756649f0c943377bf69b17201ba3f7c0759ed4b909b65ea325e784203bbd0ef7105884
SSDEEP 6144:mdvfVOyr76W0tB8tr4qT6WDXv0DSLpgu492XBVC3XkDKi:mdXnr7KB8t9dD/0DSLY0C
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringW AreFileApisANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasW CreateFileW SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue SetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetNamedPipeHandleStateW WaitForSingleObjectEx GetNamedPipeInfo ZombifyActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject lstrcpynA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

Sharing