file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221216-hsnvdsec68
SHA256 25043deed57736749b4c7cffbc200e72c549d8392863466ce03a0a8a74816c2e
MD5 18c077f97d015699daf0ec2e459b3410
SHA1 7982f58db1d402309d41c24c38b9b7665719405e
SHA512 33578da46bd23fa8c2b57c259014c1f4005abad966dfec204b64098fb2d6db2f596439d222130f2e6a8553fb1f0581b21f9af0352e4becdd840e93719aa415e9
SSDEEP 3072:I+hkaHnRLIURtq2cRgg0CHcNe1BedQ3GDcIeLppLR/YLQ2mppGT8EnQPTlHtWqMD:5hkqLIURE88cNeJ2DcXPhLtWml8qMrc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH b35462da489bc13bae884e55b5227599
SHA256 25043deed57736749b4c7cffbc200e72c549d8392863466ce03a0a8a74816c2e
MD5 18c077f97d015699daf0ec2e459b3410
SHA1 7982f58db1d402309d41c24c38b9b7665719405e
SHA512 33578da46bd23fa8c2b57c259014c1f4005abad966dfec204b64098fb2d6db2f596439d222130f2e6a8553fb1f0581b21f9af0352e4becdd840e93719aa415e9
SSDEEP 3072:I+hkaHnRLIURtq2cRgg0CHcNe1BedQ3GDcIeLppLR/YLQ2mppGT8EnQPTlHtWqMD:5hkqLIURE88cNeJ2DcXPhLtWml8qMrc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14486

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesA EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasA GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotA CommConfigDialogW GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange ReadConsoleOutputAttribute FindFirstVolumeA LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleTextAttribute AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleW SetVolumeMountPointW GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW lstrcpynW CopyFileW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW DeactivateActCtx CopyFileA WriteFile GetLogicalDriveStringsA ResetEvent LocalCompact LocalReAlloc GlobalFix SetCommState WriteConsoleInputA SetHandleCount FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd SetConsoleMode GetConsoleAliasExesLengthW EnumCalendarInfoW InterlockedDecrement CallNamedPipeW GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing