file[.]exe | Triage™

General

Target
file.exe
Size 240KB
Sample221212-vtp53aeg4z
SHA256 48277f71025a2ab48ef76442a20110d19869736a60c101b0b7c3583680aec4a5
MD5 7ca4d4ca99e04052b638422677b7add0
SHA1 fc4741e176b584dca91476331597a3c3d3369657
SHA512 2d2e3dc8286790bc9aa8a28b5855ac46e373b33cd79e3fbf63ec0978bc389d69061d77fcdacfba00bca86e566bf5428cb020f8abae3140abd27902f8432c57d3
SSDEEP 6144:RHLgR/AG/m9+vvorsg8IKyoyftf9cpgX:RH0VBm9+CUa6p
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 240KB

file.exe

IMPHASH 55d763ef3b071a2208acbbf607bd8c8a
SHA256 48277f71025a2ab48ef76442a20110d19869736a60c101b0b7c3583680aec4a5
MD5 7ca4d4ca99e04052b638422677b7add0
SHA1 fc4741e176b584dca91476331597a3c3d3369657
SHA512 2d2e3dc8286790bc9aa8a28b5855ac46e373b33cd79e3fbf63ec0978bc389d69061d77fcdacfba00bca86e566bf5428cb020f8abae3140abd27902f8432c57d3
SSDEEP 6144:RHLgR/AG/m9+vvorsg8IKyoyftf9cpgX:RH0VBm9+CUa6p
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15862

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthA CompareStringA AreFileApisANSI CreateFileW EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasA CreateFileA SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileW CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogW GetProcAddress LocalAlloc DeleteTimerQueueTimer SetHandleInformation CreateJobObjectW WriteConsoleOutputAttribute FindFirstVolumeA LocalFlags InterlockedIncrement CloseHandle GetTickCount ZombifyActCtx SetConsoleCtrlHandler AddAtomA GetThreadPriority FreeEnvironmentStringsW InterlockedExchange GetConsoleTitleW SetVolumeMountPointA ClearCommError lstrlenA CreateDirectoryExA LoadLibraryA GlobalFindAtomA TerminateJobObject lstrcpynA BackupSeek GetSystemDirectoryA VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW GetStringTypeExW GetFileAttributesW ActivateActCtx ReadFile ResetEvent LocalShrink LocalLock GlobalCompact SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleSelectionInfo CreateIoCompletionPort GetPrivateProfileStructA ConvertThreadToFiber InterlockedExchangeAdd EnumCalendarInfoW GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA CopyFileA InterlockedDecrement HeapAlloc GetLastError DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

Sharing