file[.]exe | Triage™

General

Target
file.exe
Size 213KB
Sample221216-ttnfssfa58
SHA256 79d6c51b91cd1d72bbb8ef7e196c7a9ee91aa571ee4e0b0676e3b7a5fe09af4d
MD5 7ae57dcf9fbeb4090f1f1ab2b9a36a7a
SHA1 944ccce3438f17e1423a0c462b1f77be3dd21706
SHA512 e0dbc192b3b0b6b1d1208879c08f02e159612be56fe1a3584b0b21581896edaba2c382669f8cddb30012dc7e01fddc7d417c92bc71260b1a73fdf1787264a9b5
SSDEEP 3072:AGdwXLbj4At0Rx1QfZiHD20fUrnapxTLszq/MaH6mw40zwUzQRKF+:hWLgAYwYHdUr4Tgzq/7H6H40M2b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 213KB

file.exe

IMPHASH 3670997c8c2669588bad5b8c178dedd4
SHA256 79d6c51b91cd1d72bbb8ef7e196c7a9ee91aa571ee4e0b0676e3b7a5fe09af4d
MD5 7ae57dcf9fbeb4090f1f1ab2b9a36a7a
SHA1 944ccce3438f17e1423a0c462b1f77be3dd21706
SHA512 e0dbc192b3b0b6b1d1208879c08f02e159612be56fe1a3584b0b21581896edaba2c382669f8cddb30012dc7e01fddc7d417c92bc71260b1a73fdf1787264a9b5
SSDEEP 3072:AGdwXLbj4At0Rx1QfZiHD20fUrnapxTLszq/MaH6mw40zwUzQRKF+:hWLgAYwYHdUr4Tgzq/7H6H40M2b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14678

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GetCurrentConsoleFont GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW GetCurrentActCtx WriteFile MoveFileW GetLogicalDriveStringsA ResetEvent OpenMutexA SetHandleCount FindResourceW GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing