file[.]exe | Triage™

General

Target
file.exe
Size 334KB
Sample221217-pp2emsgf56
SHA256 de32b2bcdbe7eb7e9147e121749d07fb1e3f4f13aad48bfe73123a021ff3d4e2
MD5 33cf5659a493944fdb72f3d100376d55
SHA1 f6d6621230c93be97c5762cb84a000c1035b1f7a
SHA512 45873962947591b99b51ffeff28290344ec2c3f34604602faf27f5d629de3407a40b92ada8cdf4bd2f05e7f5690cdca22a76e7e54c4b4f20a81974fa5f016779
SSDEEP 6144:HIjjLxM7z9kKJTdhdU0c863enEgkq5R51JZaXX70w2g9vpKog3Cx2+U0VB:HIntMfCKJTdhy0O3qzkqpZanfRSS8O
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 334KB

file.exe

IMPHASH e9886e59a96d1ab5cd7748b1e60f870e
SHA256 de32b2bcdbe7eb7e9147e121749d07fb1e3f4f13aad48bfe73123a021ff3d4e2
MD5 33cf5659a493944fdb72f3d100376d55
SHA1 f6d6621230c93be97c5762cb84a000c1035b1f7a
SHA512 45873962947591b99b51ffeff28290344ec2c3f34604602faf27f5d629de3407a40b92ada8cdf4bd2f05e7f5690cdca22a76e7e54c4b4f20a81974fa5f016779
SSDEEP 6144:HIjjLxM7z9kKJTdhdU0c863enEgkq5R51JZaXX70w2g9vpKog3Cx2+U0VB:HIntMfCKJTdhy0O3qzkqpZanfRSS8O
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14470

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW FindResourceW CreateJobObjectA InterlockedCompareExchange FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ZombifyActCtx SetConsoleCtrlHandler AddAtomW FindNextVolumeW FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectW lstrcpynA CopyFileW GetSystemDirectoryA VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile MoveFileW ResetEvent SetHandleCount FindResourceA GetConsoleSelectionInfo GetConsoleAliasExesLengthA OpenMutexA InterlockedDecrement GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing