file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221216-yldc3sfe23
SHA256 ebf9155541505989cb6a6ce59567ed80945dda159a1b7e9e0d5e6446f2cc2e9f
MD5 a53af3358766690fe2252c320d88d93c
SHA1 01c49a5e0834125ec31c33b4feda3baa3780abf6
SHA512 ce0b293613d1648d9d5a6c681a97fcb6666b4b8f590253bc0d558577aa3ef49e54024d9715c55c025239e2ebc74aeca0c187750912a908fb97202a4d2c3503e4
SSDEEP 3072:lM1clPLecITm0RxaXXbGASaW09T/qrBLszOQI1UeRtH40zwUzQRKF+:OoL7ITgXrBRJFeBgzOtxtH40M2b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 3670997c8c2669588bad5b8c178dedd4
SHA256 ebf9155541505989cb6a6ce59567ed80945dda159a1b7e9e0d5e6446f2cc2e9f
MD5 a53af3358766690fe2252c320d88d93c
SHA1 01c49a5e0834125ec31c33b4feda3baa3780abf6
SHA512 ce0b293613d1648d9d5a6c681a97fcb6666b4b8f590253bc0d558577aa3ef49e54024d9715c55c025239e2ebc74aeca0c187750912a908fb97202a4d2c3503e4
SSDEEP 3072:lM1clPLecITm0RxaXXbGASaW09T/qrBLszOQI1UeRtH40zwUzQRKF+:OoL7ITgXrBRJFeBgzOtxtH40M2b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14678

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc InterlockedExchange CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GetCurrentConsoleFont GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryA GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesW GetCurrentActCtx WriteFile MoveFileW GetLogicalDriveStringsA ResetEvent OpenMutexA SetHandleCount FindResourceW GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing