file[.]exe | Triage™

General

Target
file.exe
Size 273KB
Sample221216-ql79fshe9t
SHA256 09a779cf89b0271a88112d4bbb2c5605816c1934ea0ced097643d13ac95888a6
MD5 41bbc8b97453e0412c1bb0dc0d02730d
SHA1 e16bff301a4b768ff00b029d851e1091a8e7cc5b
SHA512 e9e31c34c40ef7be3f1afc574bcb48995f96f8eeaabf03fcf44e625323217b07bd2075ecb9f5d30a9688724ab5d448a1f7d3c58cabb68336f0d5033463b75e7f
SSDEEP 6144:6ILH9nRvBkZDRCG52J/dwmt3tRJD8qMrc:6IxnR5AW3HR8n
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 273KB

file.exe

IMPHASH 2cc3e4b8a374ca30888470c0a531eceb
SHA256 09a779cf89b0271a88112d4bbb2c5605816c1934ea0ced097643d13ac95888a6
MD5 41bbc8b97453e0412c1bb0dc0d02730d
SHA1 e16bff301a4b768ff00b029d851e1091a8e7cc5b
SHA512 e9e31c34c40ef7be3f1afc574bcb48995f96f8eeaabf03fcf44e625323217b07bd2075ecb9f5d30a9688724ab5d448a1f7d3c58cabb68336f0d5033463b75e7f
SSDEEP 6144:6ILH9nRvBkZDRCG52J/dwmt3tRJD8qMrc:6IxnR5AW3HR8n
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GetCurrentConsoleFont GlobalFlags CloseHandle ZombifyActCtx SetConsoleTextAttribute AddAtomA SetThreadPriority FreeEnvironmentStringsW InterlockedExchangeAdd GetConsoleTitleA SetVolumeMountPointA GetSystemWindowsDirectoryA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW DeactivateActCtx WriteFile GetLogicalDriveStringsA ResetEvent SetHandleCount FindResourceW GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing