file[.]exe | Triage™

General

Target
file.exe
Size 299KB
Sample221208-wsla6aaf76
SHA256 654707747a2873856917b4f743f30e240808023251e321c8b571edb8d4914e74
MD5 8ebf1a40ea2361adf9d246ea0c4009d0
SHA1 ed4e441d16c7cc643ac09b3555b2eb6e1a8ad1f2
SHA512 05870cb21f06fda5340272e6d35bc429770547d052c74b47815a9b6fe0657332e5459d80618b48fc7229a5ad5b0b8304ddaef24f3ac6c370f637251c2057331f
SSDEEP 6144:lKY+wTEKNiHmO/OkWirwKGb5BXMQXkDKi:ll+wTEDmgOkWiML7MQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH 0eecb839ec69f8e8cf955b02fd3e2953
SHA256 654707747a2873856917b4f743f30e240808023251e321c8b571edb8d4914e74
MD5 8ebf1a40ea2361adf9d246ea0c4009d0
SHA1 ed4e441d16c7cc643ac09b3555b2eb6e1a8ad1f2
SHA512 05870cb21f06fda5340272e6d35bc429770547d052c74b47815a9b6fe0657332e5459d80618b48fc7229a5ad5b0b8304ddaef24f3ac6c370f637251c2057331f
SSDEEP 6144:lKY+wTEKNiHmO/OkWirwKGb5BXMQXkDKi:ll+wTEDmgOkWiML7MQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25575

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringW AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency AddConsoleAliasW CreateFileW SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue SetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetNamedPipeHandleStateW SetThreadAffinityMask WaitForSingleObjectEx GetNamedPipeInfo ZombifyActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsW InterlockedExchange SetConsoleTitleW SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject lstrcpynA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

Sharing