file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221217-rfjvcabe8x
SHA256 6a5b4784f56646fee9fa12d087eb0e680baed9b07736cbecb8aadebec628f5c8
MD5 51fd6710d29fd3505128f71c91ab0d21
SHA1 b0bc82beef09799708964af638b312ffb6825c7d
SHA512 88a23c372905de0a01a43debcda44782e5c4ef3dcb329caf7f9327cd812516d255c9c50219aa5fbe8e053012ca444bf3e22dbfd09b7a93a76c24b5bb78c244eb
SSDEEP 3072:RsIPHdDL1RTR7hJngque2rLI3iVnzBj02ZBz88/g3xomwLAB2vG3ERWR3Le:LP9DL1/nruzFPdg3Cdi2eU0V6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH e9886e59a96d1ab5cd7748b1e60f870e
SHA256 6a5b4784f56646fee9fa12d087eb0e680baed9b07736cbecb8aadebec628f5c8
MD5 51fd6710d29fd3505128f71c91ab0d21
SHA1 b0bc82beef09799708964af638b312ffb6825c7d
SHA512 88a23c372905de0a01a43debcda44782e5c4ef3dcb329caf7f9327cd812516d255c9c50219aa5fbe8e053012ca444bf3e22dbfd09b7a93a76c24b5bb78c244eb
SSDEEP 3072:RsIPHdDL1RTR7hJngque2rLI3iVnzBj02ZBz88/g3xomwLAB2vG3ERWR3Le:LP9DL1/nruzFPdg3Cdi2eU0V6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14470

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW FindResourceW CreateJobObjectA InterlockedCompareExchange FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ZombifyActCtx SetConsoleCtrlHandler AddAtomW FindNextVolumeW FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectW lstrcpynA CopyFileW GetSystemDirectoryA VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile MoveFileW ResetEvent SetHandleCount FindResourceA GetConsoleSelectionInfo GetConsoleAliasExesLengthA OpenMutexA InterlockedDecrement GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing