file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221216-3hpddsag3z
SHA256 441be9004522830564a156d3fc39b8cfd8fd93db2cd6559d7d7659e87b59d6e6
MD5 6f9b38caaf2c2ef5758097d1b089d954
SHA1 357779d09c489bf9c1aeb51b5fcaf0293008e33c
SHA512 158d27a7050fe008fd58f480e604b9c82a3c280f7fd0754688c956ad50ee18bc1fd9f444858f81f23a5892ccc7fc89740b27f611c3d68234aec6ef7906a594c5
SSDEEP 3072:a/b0yPBLk+WaSbRa3ka8CF4qNO6pL3/tBXLszWZn6+s40zwUzQRKF+:QPBLk+Wa3UgcMbgzgW40M2b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH aa9c378109186462717e17e657d0c833
SHA256 441be9004522830564a156d3fc39b8cfd8fd93db2cd6559d7d7659e87b59d6e6
MD5 6f9b38caaf2c2ef5758097d1b089d954
SHA1 357779d09c489bf9c1aeb51b5fcaf0293008e33c
SHA512 158d27a7050fe008fd58f480e604b9c82a3c280f7fd0754688c956ad50ee18bc1fd9f444858f81f23a5892ccc7fc89740b27f611c3d68234aec6ef7906a594c5
SSDEEP 3072:a/b0yPBLk+WaSbRa3ka8CF4qNO6pL3/tBXLszWZn6+s40zwUzQRKF+:QPBLk+Wa3UgcMbgzgW40M2b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14838

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW DeactivateActCtx WriteFile MoveFileW GetLogicalDriveStringsA ResetEvent OpenMutexA SetHandleCount FindResourceW GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement CallNamedPipeA GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

Sharing