file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221216-12rxhsaf4v
SHA256 af486b622b72d3e10ba04fac48af78e03b670b2e3b3264f076bb89df11dbf9d8
MD5 a11ba3e9a909e7835f3b3b90162f0981
SHA1 1da2f49196d08eb3bdc8dbf99a8530113fd9329e
SHA512 08ab7b79424142524f667375b980671672fbe4825266c45904b6bce35537bb36a59af6128a84cfe4e8e75e849f64b3994c96921143275405f14acd25fd837a9e
SSDEEP 6144:+hHyLiXk1o2fz3x2QV7mQ2gzGAa40M2b:+8skagz39NTKA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH aa9c378109186462717e17e657d0c833
SHA256 af486b622b72d3e10ba04fac48af78e03b670b2e3b3264f076bb89df11dbf9d8
MD5 a11ba3e9a909e7835f3b3b90162f0981
SHA1 1da2f49196d08eb3bdc8dbf99a8530113fd9329e
SHA512 08ab7b79424142524f667375b980671672fbe4825266c45904b6bce35537bb36a59af6128a84cfe4e8e75e849f64b3994c96921143275405f14acd25fd837a9e
SSDEEP 6144:+hHyLiXk1o2fz3x2QV7mQ2gzGAa40M2b:+8skagz39NTKA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14838

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW DeactivateActCtx WriteFile MoveFileW GetLogicalDriveStringsA ResetEvent OpenMutexA SetHandleCount FindResourceW GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement CallNamedPipeA GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

Sharing