file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample221214-sdvz9sdb21
SHA256 024931f106c53cc61257a5dff3220d6ffb692d68f810c842a6d9fb08b3b74dfe
MD5 4152dd7ab9656549c526c4039488de98
SHA1 f4e053799e1e342347a85537f9778f200826b622
SHA512 2cfa95211fe940a61591c2c531bf83c96f6d835156e5f951b2f21db17878da3067d9dd12e0c36320ece731e1384349ec96bcf49beedee8e15df5141373d0fc2a
SSDEEP 3072:7bh7Fo3cLagSvs9f56H4eqc5yGJsc+gds9y2XCJjQDxKYIsWgovH6py:Ph7FCcLqvsyHNQwBts94+IHJv6o
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH 522a7fb25a51aff691010b4c290f5b6a
SHA256 024931f106c53cc61257a5dff3220d6ffb692d68f810c842a6d9fb08b3b74dfe
MD5 4152dd7ab9656549c526c4039488de98
SHA1 f4e053799e1e342347a85537f9778f200826b622
SHA512 2cfa95211fe940a61591c2c531bf83c96f6d835156e5f951b2f21db17878da3067d9dd12e0c36320ece731e1384349ec96bcf49beedee8e15df5141373d0fc2a
SSDEEP 3072:7bh7Fo3cLagSvs9f56H4eqc5yGJsc+gds9y2XCJjQDxKYIsWgovH6py:Ph7FCcLqvsyHNQwBts94+IHJv6o
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15318

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW SearchPathA MoveFileA GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotA CommConfigDialogW GetProcAddress LoadLibraryA LocalAlloc ChangeTimerQueueTimer GetHandleInformation CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeA LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleTextAttribute AddAtomA GetThreadPriority FreeEnvironmentStringsW GetConsoleTitleW SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomW TerminateJobObject CopyFileW lstrcpynA VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExW GetFileAttributesW DeactivateActCtx CopyFileA WriteFile SetEvent LocalCompact LocalReAlloc GlobalCompact SetCommState WriteConsoleInputA InitAtomTable FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedExchangeAdd GetConsoleMode GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing