file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample221217-rbjc1sbe71
SHA256 2a6fd6e8cf284a66dbb99eb692611c76cbdde2002e7a7d8b41ae2a7c4dfcf148
MD5 e0cd374c0312cec928f20f0c3e751e5c
SHA1 2d94213e98ed1f14d9e854b51c08fa8245e73fc9
SHA512 bba924881dde99de05366e8e1b4ab61f8ea72ace7daab019ec10e79c8e3501298222860fdb915db3afdd76ea2b4c3a75b3b02c8a4dd303cb72bffd824dbac829
SSDEEP 6144:tIzZLPx/KzMURpKojAvt8A2O4NHI12g3CZiU0VB:tId7xB7t8AFSZDO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH e9886e59a96d1ab5cd7748b1e60f870e
SHA256 2a6fd6e8cf284a66dbb99eb692611c76cbdde2002e7a7d8b41ae2a7c4dfcf148
MD5 e0cd374c0312cec928f20f0c3e751e5c
SHA1 2d94213e98ed1f14d9e854b51c08fa8245e73fc9
SHA512 bba924881dde99de05366e8e1b4ab61f8ea72ace7daab019ec10e79c8e3501298222860fdb915db3afdd76ea2b4c3a75b3b02c8a4dd303cb72bffd824dbac829
SSDEEP 6144:tIzZLPx/KzMURpKojAvt8A2O4NHI12g3CZiU0VB:tId7xB7t8AFSZDO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14470

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW FindResourceW CreateJobObjectA InterlockedCompareExchange FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ZombifyActCtx SetConsoleCtrlHandler AddAtomW FindNextVolumeW FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectW lstrcpynA CopyFileW GetSystemDirectoryA VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile MoveFileW ResetEvent SetHandleCount FindResourceA GetConsoleSelectionInfo GetConsoleAliasExesLengthA OpenMutexA InterlockedDecrement GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing