file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221218-e8sxhade8s
SHA256 b3df501713678b476ab601ed6afb83ccbc82ef2c306190e5d358aef52729a7e1
MD5 f32bc2d6731229b8eaf2d0ca1e2d77f6
SHA1 3eb9d9b838ffdaaca34cb3a3bf5f4c9bcb43f8d4
SHA512 6a4da81957646261e639d8ef583f8e0d8de69cde0c788a5615309fa7655751ab1865a21e83eeac60d9f58083c1de4a6594f3345dd4d334eeff17bd269d0c46bc
SSDEEP 3072:rRoDqisCLl2ZwRRuUkwK2/L5NO8/g3xo0MnPpjMtG3ERWR3LV:2DqrCLl20n/9NTg3C7PpjMsU0VB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 1a4eff9c4d3cb3a6772cfd44c9b889f6
SHA256 b3df501713678b476ab601ed6afb83ccbc82ef2c306190e5d358aef52729a7e1
MD5 f32bc2d6731229b8eaf2d0ca1e2d77f6
SHA1 3eb9d9b838ffdaaca34cb3a3bf5f4c9bcb43f8d4
SHA512 6a4da81957646261e639d8ef583f8e0d8de69cde0c788a5615309fa7655751ab1865a21e83eeac60d9f58083c1de4a6594f3345dd4d334eeff17bd269d0c46bc
SSDEEP 3072:rRoDqisCLl2ZwRRuUkwK2/L5NO8/g3xo0MnPpjMtG3ERWR3LV:2DqrCLl20n/9NTg3C7PpjMsU0VB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExA FindResourceW ContinueDebugEvent InterlockedCompareExchange FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA CopyFileW lstrcpynA VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExA OpenMutexW DeactivateActCtx WriteFile ResetEvent SetHandleCount FindResourceA GetConsoleAliasExesLengthA MoveFileA GetConsoleSelectionInfo InterlockedDecrement SetFileApisToANSI GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing