file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221216-wtql9sfb97
SHA256 616a2c49d5e2f30065d905767dca057c39b668b74c0022f7ab80688e3bf04a9b
MD5 56ecf76e6031ce85e240f4fc0213c3e2
SHA1 344a59fbaa85a8238f2428785939c3c50cd5d656
SHA512 f6102608eb4dd5e83fabfc4f343be3725a4eb122d33cf631b876e79c63a57da55c5c53a9b526b69e78bea454f6735e83f97df475972b741512cc5fbfbe22d70b
SSDEEP 3072:oNSIFLXpTM0Rzn5kS9PZpgojq7FTXoLszb6UQLW40zwUzQRKF+:gtL5TzkwPfdW7qgzbX40M2b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 3670997c8c2669588bad5b8c178dedd4
SHA256 616a2c49d5e2f30065d905767dca057c39b668b74c0022f7ab80688e3bf04a9b
MD5 56ecf76e6031ce85e240f4fc0213c3e2
SHA1 344a59fbaa85a8238f2428785939c3c50cd5d656
SHA512 f6102608eb4dd5e83fabfc4f343be3725a4eb122d33cf631b876e79c63a57da55c5c53a9b526b69e78bea454f6735e83f97df475972b741512cc5fbfbe22d70b
SSDEEP 3072:oNSIFLXpTM0Rzn5kS9PZpgojq7FTXoLszb6UQLW40zwUzQRKF+:gtL5TzkwPfdW7qgzbX40M2b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14678

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GetCurrentConsoleFont GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW GetCurrentActCtx WriteFile MoveFileW GetLogicalDriveStringsA ResetEvent OpenMutexA SetHandleCount FindResourceW GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing