file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample221217-rfjvcagg36
SHA256 4da8ae10342ef713db2a1305bcf799fab6f4eae54589087d7e4a84106df7b748
MD5 576953e4c8a3f06fdfe85e92998e7989
SHA1 7591325a7ddd7e50ccf78251a179ddcccdb34ff3
SHA512 8ca1a5b506bc1d42512ef1dea149300293c0341f36da391470e3090213e90fe1902d9fef02e012d6e5b8fe5c46745e7f522e2772f1cdbf44e46ff795d4a9cd2a
SSDEEP 6144:FIpsLGW6sL5MHM6Y64dJ3FGoZmuHTg3CL2U0V6:FIOqWxL5MHMrFZ+SLnO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH e9886e59a96d1ab5cd7748b1e60f870e
SHA256 4da8ae10342ef713db2a1305bcf799fab6f4eae54589087d7e4a84106df7b748
MD5 576953e4c8a3f06fdfe85e92998e7989
SHA1 7591325a7ddd7e50ccf78251a179ddcccdb34ff3
SHA512 8ca1a5b506bc1d42512ef1dea149300293c0341f36da391470e3090213e90fe1902d9fef02e012d6e5b8fe5c46745e7f522e2772f1cdbf44e46ff795d4a9cd2a
SSDEEP 6144:FIpsLGW6sL5MHM6Y64dJ3FGoZmuHTg3CL2U0V6:FIOqWxL5MHMrFZ+SLnO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14470

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW FindResourceW CreateJobObjectA InterlockedCompareExchange FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ZombifyActCtx SetConsoleCtrlHandler AddAtomW FindNextVolumeW FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectW lstrcpynA CopyFileW GetSystemDirectoryA VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile MoveFileW ResetEvent SetHandleCount FindResourceA GetConsoleSelectionInfo GetConsoleAliasExesLengthA OpenMutexA InterlockedDecrement GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing