file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221218-pawkvaef8y
SHA256 08e65009ccd9ada0728cc2487220f440984cb2f846fc465e9b47ded8a0968c94
MD5 b041ea9fd0a982838f03f7450c7c5fb6
SHA1 a9984b0f17a11f9f7018b01a7e472f8d6e57ff39
SHA512 f6b2a3feb6397564e6f28a45b7c5c684ee34b864727d162dc40c338135af3e8a9d439424f32c178d292b37caba5a8039dbafe00812c2984dec44b2521be28b38
SSDEEP 3072:MmIoxYLB3RtkoOFuT0ZixckAfQT1QqO6ng3uVPZHOil3lk025PH:TIkYLBEoO4gZixsC1QqOT+VhjlVklPH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 5df705b1752355381072404cefe77195
SHA256 08e65009ccd9ada0728cc2487220f440984cb2f846fc465e9b47ded8a0968c94
MD5 b041ea9fd0a982838f03f7450c7c5fb6
SHA1 a9984b0f17a11f9f7018b01a7e472f8d6e57ff39
SHA512 f6b2a3feb6397564e6f28a45b7c5c684ee34b864727d162dc40c338135af3e8a9d439424f32c178d292b37caba5a8039dbafe00812c2984dec44b2521be28b38
SSDEEP 3072:MmIoxYLB3RtkoOFuT0ZixckAfQT1QqO6ng3uVPZHOil3lk025PH:TIkYLBEoO4gZixsC1QqOT+VhjlVklPH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13990

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc ExitThread FindResourceA GetConsoleAliasExesLengthA GetCPInfoExA FindResourceW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler MoveFileA PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsA GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA lstrcpynA CopyFileW InterlockedDecrement SetFileApisToANSI GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing