file[.]exe | Triage™

General

Target
file.exe
Size 213KB
Sample221217-e5dneagb73
SHA256 2a7e3dbe23dc9f6a5195874b76d0b161e56ec6db401eec3dbe12e9ba5b7e516d
MD5 380fd2517d3a380ae00ec304f92739df
SHA1 b66bbe04ace95c3f1a1e2bed77965f6d898a96b4
SHA512 b3f7d95327e4d99ce536b11a7f64afde93ffe24d40febd369739603cf667bf26efe2b692841fc365f0dc7dcae02ed1b3e0ece1a39b0d3c2900909eb872e6c25d
SSDEEP 3072:GlZgxtLGdOMcaTR0XNurWaFc0IPnMzzvCieFvLszr/Hv117Hw40zwUzQRKF+:IeLGdOnXNuro0zzqi4gzjv117Q40M2b
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 213KB

file.exe

IMPHASH e6bd3d9b5d23304bda5e80b81c28964e
SHA256 2a7e3dbe23dc9f6a5195874b76d0b161e56ec6db401eec3dbe12e9ba5b7e516d
MD5 380fd2517d3a380ae00ec304f92739df
SHA1 b66bbe04ace95c3f1a1e2bed77965f6d898a96b4
SHA512 b3f7d95327e4d99ce536b11a7f64afde93ffe24d40febd369739603cf667bf26efe2b692841fc365f0dc7dcae02ed1b3e0ece1a39b0d3c2900909eb872e6c25d
SSDEEP 3072:GlZgxtLGdOMcaTR0XNurWaFc0IPnMzzvCieFvLszr/Hv117Hw40zwUzQRKF+:IeLGdOnXNuro0zzqi4gzjv117Q40M2b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW FindResourceW CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomA SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectW CopyFileW lstrcpynW VerSetConditionMask EnumSystemLocalesA QueryDepthSList WritePrivateProfileSectionA GetStringTypeExA GetFileAttributesA DeactivateActCtx WriteFile MoveFileW ResetEvent OpenMutexA SetHandleCount FindResourceA GetConsoleAliasExesLengthW GetConsoleSelectionInfo InterlockedDecrement CallNamedPipeA GetModuleHandleA GetTickCount Sleep ExitProcess GetLastError DeleteFileA GetStartupInfoW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers

Sharing