file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221218-2v4heagh3v
SHA256 7cb730ff9cc0d98eb54dfeadca673e722e6234ca274950fe530e26a9324b270e
MD5 efdffe31016f54cbc72a8b17503bc7dc
SHA1 5259431d6043506c31a1c15c2de50d0f0ec6444f
SHA512 da538d14bd416626220f73cbbc33d025b91b5904089f52eb02caf5caa308896ef31b1f8d1e7eb127108026c5584e05abfbef91d65b1898173f085700cd6b2ddf
SSDEEP 3072:WBTMKLdpMpNaRyyhewP0YfUNX61SuSdaNRAtOba+/zdn+hjcbImdzmuX:WKKLDMpfUfW61480Mdn+hjcbXF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH c50bea46cfddfdc15672a96efbafed97
SHA256 7cb730ff9cc0d98eb54dfeadca673e722e6234ca274950fe530e26a9324b270e
MD5 efdffe31016f54cbc72a8b17503bc7dc
SHA1 5259431d6043506c31a1c15c2de50d0f0ec6444f
SHA512 da538d14bd416626220f73cbbc33d025b91b5904089f52eb02caf5caa308896ef31b1f8d1e7eb127108026c5584e05abfbef91d65b1898173f085700cd6b2ddf
SSDEEP 3072:WBTMKLdpMpNaRyyhewP0YfUNX61SuSdaNRAtOba+/zdn+hjcbImdzmuX:WKKLDMpfUfW61480Mdn+hjcbXF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20790

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExA DeleteTimerQueueTimer FindResourceW FormatMessageW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsW BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile ResetEvent OpenMutexA FindResourceA GetConsoleFontSize GetConsoleAliasExesLengthA MoveFileA InterlockedDecrement RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW

user32

GetMessageExtraInfo

Sharing