file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221217-vr1tsagh35
SHA256 d4abbec10db23dfd586a7b2327f6797e9686aa2c251dc9783c57e69bd5480293
MD5 a5b182d4c77f479757f622039b136a7f
SHA1 89e4d373ac1979c72655b9a50a0a36f403083956
SHA512 a710d97b616428964a8d469a24448a7f027ed7baba9736c1cc9f94a63dd273e88714dc89f3c427591c35ac5ae28c92a33a177c9d3c01afb51f001350e741ed11
SSDEEP 6144:nsMRLpHcwnRBIliFSrUoTYhNg3C72DU0V6:nss1HTBiiWdYYS72gO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 5469c52e5550f8b99afd1cfc0c2811f4
SHA256 d4abbec10db23dfd586a7b2327f6797e9686aa2c251dc9783c57e69bd5480293
MD5 a5b182d4c77f479757f622039b136a7f
SHA1 89e4d373ac1979c72655b9a50a0a36f403083956
SHA512 a710d97b616428964a8d469a24448a7f027ed7baba9736c1cc9f94a63dd273e88714dc89f3c427591c35ac5ae28c92a33a177c9d3c01afb51f001350e741ed11
SSDEEP 6144:nsMRLpHcwnRBIliFSrUoTYhNg3C72DU0V6:nss1HTBiiWdYYS72gO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14134

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileA GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExW FindResourceW ContinueDebugEvent InterlockedCompareExchange FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ZombifyActCtx SetConsoleCtrlHandler PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA lstrcpynA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExA DeactivateActCtx WriteFile MoveFileW ResetEvent SetHandleCount FindResourceA GetConsoleSelectionInfo GetConsoleAliasExesLengthA OpenMutexA InterlockedDecrement SetFileApisToANSI GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing