file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221213-bwtfqagb5x
SHA256 0f3c99c8660671a617eafc777974343e67fdcbe5e8ccca6528384e19704e2e3c
MD5 7d4e8a4f9b0a435c8b62b26d861ea39d
SHA1 a73bef656dae5d35206d5936979731f87cb34ee9
SHA512 ce476c97b99183414370fba2102e91f6a85436387d56609ba8224e9f6f91251f201dd6fd8bf35692ec669b53c4d094d6e30a7fd4e256eba324e75e3000a970cf
SSDEEP 6144:GSpLrfbd/0yD2z7qbuNKD4Ndvv9T2lhe6:Gefp0yE7quLb8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH bdde5671a4674deff1164c98172a8747
SHA256 0f3c99c8660671a617eafc777974343e67fdcbe5e8ccca6528384e19704e2e3c
MD5 7d4e8a4f9b0a435c8b62b26d861ea39d
SHA1 a73bef656dae5d35206d5936979731f87cb34ee9
SHA512 ce476c97b99183414370fba2102e91f6a85436387d56609ba8224e9f6f91251f201dd6fd8bf35692ec669b53c4d094d6e30a7fd4e256eba324e75e3000a970cf
SSDEEP 6144:GSpLrfbd/0yD2z7qbuNKD4Ndvv9T2lhe6:Gefp0yE7quLb8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15830

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesA EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthA CompareStringA AreFileApisANSI CreateFileW EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasA SetComputerNameA GetSystemWindowsDirectoryW GetModuleHandleA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW SearchPathW MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogW GetProcAddress LocalAlloc DeleteTimerQueueTimer SetHandleInformation CreateJobObjectA WriteConsoleOutputAttribute FindFirstVolumeA InterlockedIncrement LocalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA GetThreadPriority FreeEnvironmentStringsW GetConsoleTitleW SetVolumeMountPointA GetSystemWindowsDirectoryA ClearCommError lstrlenA CreateDirectoryExA GlobalFindAtomA TerminateJobObject CopyFileW lstrcpynA BackupSeek VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW GetStringTypeExW GetFileAttributesW ActivateActCtx CopyFileA WriteFile ResetEvent LocalCompact LocalReAlloc GlobalCompact SetCommState WriteConsoleInputA DeleteAtom FindResourceW GetConsoleSelectionInfo CreateIoCompletionPort GetPrivateProfileStructA ConvertThreadToFiber EnumCalendarInfoW GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthW MoveFileW InterlockedExchangeAdd InterlockedDecrement GetModuleHandleW GetTickCount HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError HeapSize GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA DeleteFileA

Sharing