file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221218-k7a8ysbc59
SHA256 fcd65aa6feca4936d6c185211df169dfdd58d5d8ce3c1d9778247ffd876971ea
MD5 a5f564e3b5e5d50a32cd647518037b52
SHA1 b44c13257037cd5c64f8b246b2cb3e2a4dcee102
SHA512 ad0537d18cfad23f44be4214fdf2cecdd5c194d871ef3667ae5e63db809fcf9aa4f36ba862df2922eb743407103336d5aba6ab9bebcd9eb33e6a9e5f1f973cbd
SSDEEP 3072:FWxi1qLkLRU2vulMqS3sXt2ECwZW21PCGg3uppIHOil3lk025PH:gxeqLklGlk8d2ECwZW2I+ppIjlVklPH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 5df705b1752355381072404cefe77195
SHA256 fcd65aa6feca4936d6c185211df169dfdd58d5d8ce3c1d9778247ffd876971ea
MD5 a5f564e3b5e5d50a32cd647518037b52
SHA1 b44c13257037cd5c64f8b246b2cb3e2a4dcee102
SHA512 ad0537d18cfad23f44be4214fdf2cecdd5c194d871ef3667ae5e63db809fcf9aa4f36ba862df2922eb743407103336d5aba6ab9bebcd9eb33e6a9e5f1f973cbd
SSDEEP 3072:FWxi1qLkLRU2vulMqS3sXt2ECwZW21PCGg3uppIHOil3lk025PH:gxeqLklGlk8d2ECwZW2I+ppIjlVklPH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13990

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc ExitThread FindResourceA GetConsoleAliasExesLengthA GetCPInfoExA FindResourceW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler MoveFileA PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsA GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA lstrcpynA CopyFileW InterlockedDecrement SetFileApisToANSI GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing