file[.]exe | Triage™

General

Target
file.exe
Size 347KB
Sample221216-grfxqaec25
SHA256 e1a18f0c3c17e89784482e9574c44c3e5878e659a6e0abc71fb24bcc1078f89f
MD5 d2744bfca25b9dc2626acbe6577e8de4
SHA1 e94066711058e0dcef652e4b6a73ada18e2cc842
SHA512 0e409d2d202bf08cb1767f0ae0832a8be5cfcc319a6d3df6a23ca76693913e3db591d7b69a3b3c49a93e6054024c573f99397b4b31e1aa16aa82df7cda5e6a62
SSDEEP 6144:08kzLHWhpebIevDmJ5CNu7CUN7qv+2ilTCUNpLxTCZpD/I6tiQ8qMrc:08kzbWflqDmz9N7qWjKDg678n
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 347KB

file.exe

IMPHASH b35462da489bc13bae884e55b5227599
SHA256 e1a18f0c3c17e89784482e9574c44c3e5878e659a6e0abc71fb24bcc1078f89f
MD5 d2744bfca25b9dc2626acbe6577e8de4
SHA1 e94066711058e0dcef652e4b6a73ada18e2cc842
SHA512 0e409d2d202bf08cb1767f0ae0832a8be5cfcc319a6d3df6a23ca76693913e3db591d7b69a3b3c49a93e6054024c573f99397b4b31e1aa16aa82df7cda5e6a62
SSDEEP 6144:08kzLHWhpebIevDmJ5CNu7CUN7qv+2ilTCUNpLxTCZpD/I6tiQ8qMrc:08kzbWflqDmz9N7qWjKDg678n
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14486

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesA EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasA GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotA CommConfigDialogW GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange ReadConsoleOutputAttribute FindFirstVolumeA LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleTextAttribute AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleW SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW lstrcpynW CopyFileW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW DeactivateActCtx CopyFileA WriteFile GetLogicalDriveStringsA ResetEvent LocalCompact LocalReAlloc GlobalFix SetCommState WriteConsoleInputA SetHandleCount FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd SetConsoleMode GetConsoleAliasExesLengthW EnumCalendarInfoW InterlockedDecrement CallNamedPipeW GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing