file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221216-tlr41sfa45
SHA256 4dc101ad2ec4b54ee898bbc532cd8858641b4ec8a03afbeea80b90421025428f
MD5 3f882a5db6956c55b9d53655b54c7a0c
SHA1 28e19c4bcf7ee7aa59a5fa028d6233bd8a06af90
SHA512 d787997ca46f4d00f782f9baf0cd799288481c8d89289802ec67dbc01edd5042d44993b5472281e3a344c80f8834e6a013ac898edcf9a5dd494e6d208181583e
SSDEEP 3072:/KUzwL7+r/0R7I3ySK7giFiNdYjXbBmLsz0j40zwUzQRKF+:yJLqrvjbiPDbBmgzM40M2b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 3670997c8c2669588bad5b8c178dedd4
SHA256 4dc101ad2ec4b54ee898bbc532cd8858641b4ec8a03afbeea80b90421025428f
MD5 3f882a5db6956c55b9d53655b54c7a0c
SHA1 28e19c4bcf7ee7aa59a5fa028d6233bd8a06af90
SHA512 d787997ca46f4d00f782f9baf0cd799288481c8d89289802ec67dbc01edd5042d44993b5472281e3a344c80f8834e6a013ac898edcf9a5dd494e6d208181583e
SSDEEP 3072:/KUzwL7+r/0R7I3ySK7giFiNdYjXbBmLsz0j40zwUzQRKF+:yJLqrvjbiPDbBmgzM40M2b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14678

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GetCurrentConsoleFont GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW GetCurrentActCtx WriteFile MoveFileW GetLogicalDriveStringsA ResetEvent OpenMutexA SetHandleCount FindResourceW GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing