file[.]exe | Triage™

General

Target
file.exe
Size 333KB
Sample221217-abf48aag5x
SHA256 cacdb531596551ebf69091410b07d2de2b2b5852e2bcfd3fcaf042d0ecee0278
MD5 18740a009680fe38a1a107fbfcd098af
SHA1 7636ef7fc4b6940ef7dbbc90c23189e44db006d7
SHA512 a41478765b6cbbb6d1c17fb40c8e2cd9f17371a881ca37c3200e8bb74d03ad6079fc9a699f4d776459dd9e43e66a6cc5b4f8e0a331e2bbc38b9206c5b44bb0d1
SSDEEP 6144:oeLOf3eqHbBJudVxZbTSEOoVPubHEigzLVL5H40M2b:oeqvx7SbnDVWoP/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 333KB

file.exe

IMPHASH e6bd3d9b5d23304bda5e80b81c28964e
SHA256 cacdb531596551ebf69091410b07d2de2b2b5852e2bcfd3fcaf042d0ecee0278
MD5 18740a009680fe38a1a107fbfcd098af
SHA1 7636ef7fc4b6940ef7dbbc90c23189e44db006d7
SHA512 a41478765b6cbbb6d1c17fb40c8e2cd9f17371a881ca37c3200e8bb74d03ad6079fc9a699f4d776459dd9e43e66a6cc5b4f8e0a331e2bbc38b9206c5b44bb0d1
SSDEEP 6144:oeLOf3eqHbBJudVxZbTSEOoVPubHEigzLVL5H40M2b:oeqvx7SbnDVWoP/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW FindResourceW CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA QueryDepthSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesA DeactivateActCtx WriteFile MoveFileW ResetEvent OpenMutexA SetHandleCount FindResourceA GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement CallNamedPipeA GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers

Sharing