file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221218-jktaksba37
SHA256 c7c324ef2a321b2b7bf4d41e2dc85cfe0554db00acd9432cfc953bcca3622c54
MD5 2f8da6a65afff7d1bf49fdd7a7603fa7
SHA1 2c049d037a674270cee49437ad6df7b18af617b0
SHA512 f2d6ade705c03d42e53c9ad23950e0c0b1b2f2417e73d7df042dc4250fa9ae09a11d3718392b79e9eb289684a879ebe56fbb67661e99d7de5b87f97764bde893
SSDEEP 6144:ACjS1LLU2Jedzl1mBYNPJgGIx1g3COee+U0VB:ACjOPXJe6YlqG7SOeefO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 1a4eff9c4d3cb3a6772cfd44c9b889f6
SHA256 c7c324ef2a321b2b7bf4d41e2dc85cfe0554db00acd9432cfc953bcca3622c54
MD5 2f8da6a65afff7d1bf49fdd7a7603fa7
SHA1 2c049d037a674270cee49437ad6df7b18af617b0
SHA512 f2d6ade705c03d42e53c9ad23950e0c0b1b2f2417e73d7df042dc4250fa9ae09a11d3718392b79e9eb289684a879ebe56fbb67661e99d7de5b87f97764bde893
SSDEEP 6144:ACjS1LLU2Jedzl1mBYNPJgGIx1g3COee+U0VB:ACjOPXJe6YlqG7SOeefO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExA FindResourceW ContinueDebugEvent InterlockedCompareExchange FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsW GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA CopyFileW lstrcpynA VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExA OpenMutexW DeactivateActCtx WriteFile ResetEvent SetHandleCount FindResourceA GetConsoleAliasExesLengthA MoveFileA GetConsoleSelectionInfo InterlockedDecrement SetFileApisToANSI GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing