file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221213-aebc5sgb2v
SHA256 41785f34c7482f6760afc35b422aff45efbdddcf1e21e6a8398a8702f38fe5d0
MD5 b3d79a83c30d2cc454ce322add494223
SHA1 955796bdcea2fa90f5274ac8b2afacbb642e05b0
SHA512 ba646d33c5d4a1cbb85e285d2b41a0e622e1b429f8030d64719880129a024ec8f1d61d531977b3ef19cbd6d55dc712ef67f375a83d45cc7f16cbad2844764b4d
SSDEEP 6144:spgnLe54qCZ41bbdHpdP7NKqurv9T2lhe6:sgWlp1bbZB1u4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH bdde5671a4674deff1164c98172a8747
SHA256 41785f34c7482f6760afc35b422aff45efbdddcf1e21e6a8398a8702f38fe5d0
MD5 b3d79a83c30d2cc454ce322add494223
SHA1 955796bdcea2fa90f5274ac8b2afacbb642e05b0
SHA512 ba646d33c5d4a1cbb85e285d2b41a0e622e1b429f8030d64719880129a024ec8f1d61d531977b3ef19cbd6d55dc712ef67f375a83d45cc7f16cbad2844764b4d
SSDEEP 6144:spgnLe54qCZ41bbdHpdP7NKqurv9T2lhe6:sgWlp1bbZB1u4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15830

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesA EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthA CompareStringA AreFileApisANSI CreateFileW EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasA SetComputerNameA GetSystemWindowsDirectoryW GetModuleHandleA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW SearchPathW MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogW GetProcAddress LocalAlloc DeleteTimerQueueTimer SetHandleInformation CreateJobObjectA WriteConsoleOutputAttribute FindFirstVolumeA InterlockedIncrement LocalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA GetThreadPriority FreeEnvironmentStringsW GetConsoleTitleW SetVolumeMountPointA GetSystemWindowsDirectoryA ClearCommError lstrlenA CreateDirectoryExA GlobalFindAtomA TerminateJobObject CopyFileW lstrcpynA BackupSeek VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW GetStringTypeExW GetFileAttributesW ActivateActCtx CopyFileA WriteFile ResetEvent LocalCompact LocalReAlloc GlobalCompact SetCommState WriteConsoleInputA DeleteAtom FindResourceW GetConsoleSelectionInfo CreateIoCompletionPort GetPrivateProfileStructA ConvertThreadToFiber EnumCalendarInfoW GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthW MoveFileW InterlockedExchangeAdd InterlockedDecrement GetModuleHandleW GetTickCount HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError HeapSize GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA DeleteFileA

Sharing