file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221214-pt2k7saa42
SHA256 f5aa229dd50bcfafa825b8fedac5cf14dfc3b8e4c6a4946735300954f86ded5a
MD5 7c03bafca5f6e42affa5eac78c833b3d
SHA1 29409437236e6f5088afe6b53a64f573f9eb894f
SHA512 7a5b5580e2f25ff42dea48f032accc3c38220fee99d9486346583e40435c2ae083a2da03623f619b7263216e09a0bb6164f37c68860085d2f34ee2f88f8bbc6f
SSDEEP 3072:vbBDia/CSnRL/bROpB9z5p8/UigrvRNwLOwDRKYIsZlsp0vT6py:vbEa/CGLlOpw/UjrpnrN0b6o
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH 5c90fe5debb9fc3a506e0baa1b0bbcf6
SHA256 f5aa229dd50bcfafa825b8fedac5cf14dfc3b8e4c6a4946735300954f86ded5a
MD5 7c03bafca5f6e42affa5eac78c833b3d
SHA1 29409437236e6f5088afe6b53a64f573f9eb894f
SHA512 7a5b5580e2f25ff42dea48f032accc3c38220fee99d9486346583e40435c2ae083a2da03623f619b7263216e09a0bb6164f37c68860085d2f34ee2f88f8bbc6f
SSDEEP 3072:vbBDia/CSnRL/bROpB9z5p8/UigrvRNwLOwDRKYIsZlsp0vT6py:vbEa/CGLlOpw/UjrpnrN0b6o
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15270

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW SearchPathA MoveFileA GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotA CommConfigDialogW GetProcAddress LoadLibraryA LocalAlloc ChangeTimerQueueTimer SetHandleInformation CreateJobObjectA WriteConsoleOutputAttribute FindFirstVolumeA LocalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA GetThreadPriority FreeEnvironmentStringsW GetConsoleTitleW SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomW TerminateJobObject CopyFileW lstrcpynA VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExW GetFileAttributesW DeactivateActCtx CopyFileA WriteFile SetEvent LocalCompact LocalReAlloc GlobalCompact SetCommState WriteConsoleInputA InitAtomTable FindResourceW GetConsoleSelectionInfo CreateIoCompletionPort GetPrivateProfileStructA ConvertThreadToFiber InterlockedExchangeAdd GetConsoleMode GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement GetTickCount GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA DeleteFileA

Sharing