file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221216-wrfdhsfb89
SHA256 f74dd5fa6d702e49c5015da44a611dade59605d2eed0438c5fa58b189a27bbf7
MD5 2a7d73ee42b1c0d4669cc81800c605f5
SHA1 d9d66291ca43d0d45914f3e034ad7b32ed106978
SHA512 00e355afc78cc0dbc4675d7773f6e05fee00f444a6318a0b95907440eae49b771502d53720a3952da1bbc06128dffbcf2dce5eac258a2794f683c4724ff58ec7
SSDEEP 3072:MJquEydLmyjD0RErZahFyI81VCv60LszWVaNx40zwUzQRKF+:gq78LnjHrmk1U60gzVx40M2b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 3670997c8c2669588bad5b8c178dedd4
SHA256 f74dd5fa6d702e49c5015da44a611dade59605d2eed0438c5fa58b189a27bbf7
MD5 2a7d73ee42b1c0d4669cc81800c605f5
SHA1 d9d66291ca43d0d45914f3e034ad7b32ed106978
SHA512 00e355afc78cc0dbc4675d7773f6e05fee00f444a6318a0b95907440eae49b771502d53720a3952da1bbc06128dffbcf2dce5eac258a2794f683c4724ff58ec7
SSDEEP 3072:MJquEydLmyjD0RErZahFyI81VCv60LszWVaNx40zwUzQRKF+:gq78LnjHrmk1U60gzVx40M2b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14678

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GetCurrentConsoleFont GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW GetCurrentActCtx WriteFile MoveFileW GetLogicalDriveStringsA ResetEvent OpenMutexA SetHandleCount FindResourceW GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing