file[.]exe | Triage™

General

Target
file.exe
Size 335KB
Sample221217-n7fefsgf34
SHA256 7eac99fcced27b1c16f2bdc4d725bdd481e84f4318dba44719d10d8b7e6bbea7
MD5 163931b13683645fa6d75c94fc72922d
SHA1 a4a59343dc899ffb50daed3cdfd1764ce7e18b9d
SHA512 819a4c013c00dd949ee250579686b854393d35b4970483bab9ee0ce2d758d735d398aca8e52fd32ac40ae13d7d659be52c18f49c9b0ffc776813f13d18e2ab26
SSDEEP 6144:pdD0QLxFaG9yxQRv1np6xRLj2i2o/YuMHxCdNemWe9j9g3CHVc1U0VC:pdDxvaGV/pyRLj9bMaNezkeS1DO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 335KB

file.exe

IMPHASH b82e433508b26af99a5d189f77b0c7ab
SHA256 7eac99fcced27b1c16f2bdc4d725bdd481e84f4318dba44719d10d8b7e6bbea7
MD5 163931b13683645fa6d75c94fc72922d
SHA1 a4a59343dc899ffb50daed3cdfd1764ce7e18b9d
SHA512 819a4c013c00dd949ee250579686b854393d35b4970483bab9ee0ce2d758d735d398aca8e52fd32ac40ae13d7d659be52c18f49c9b0ffc776813f13d18e2ab26
SSDEEP 6144:pdD0QLxFaG9yxQRv1np6xRLj2i2o/YuMHxCdNemWe9j9g3CHVc1U0VC:pdDxvaGV/pyRLj9bMaNezkeS1DO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14502

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW FindResourceW CreateJobObjectA InterlockedCompareExchange FindFirstVolumeW LocalFree GlobalFlags CloseHandle ZombifyActCtx SetConsoleCtrlHandler AddAtomW SetThreadPriority FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectW lstrcpynW CopyFileW VerSetConditionMask EnumSystemLocalesA QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile MoveFileW ResetEvent SetHandleCount FindResourceA GetConsoleSelectionInfo GetConsoleAliasExesLengthW OpenMutexA InterlockedDecrement GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers

Sharing