file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221218-pt2k7sca24
SHA256 e83bbbc52bb1cb1e85d272aa86419dbd854785c82f49fa8845867c27c8ba76ee
MD5 a33210b7e8aaaa55dab979e280812fb1
SHA1 47823ab73aed510fd42584342f7824db1ef7392a
SHA512 1211b2b55ac86c417f89073b603ee863538d2d18cfa00ef8dcc77aede6d7fff6ef661e496e0c6b6d36f34eca28aad7f924efa777fa22b6a250ae8fd143687eb6
SSDEEP 3072:7NEymhLGWRPvxziuuhB+XbsU/VyutS2g3urWbHOil3lk025PH:pEhhLGaJyB+XbH/XSX+rWbjlVklPH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 5df705b1752355381072404cefe77195
SHA256 e83bbbc52bb1cb1e85d272aa86419dbd854785c82f49fa8845867c27c8ba76ee
MD5 a33210b7e8aaaa55dab979e280812fb1
SHA1 47823ab73aed510fd42584342f7824db1ef7392a
SHA512 1211b2b55ac86c417f89073b603ee863538d2d18cfa00ef8dcc77aede6d7fff6ef661e496e0c6b6d36f34eca28aad7f924efa777fa22b6a250ae8fd143687eb6
SSDEEP 3072:7NEymhLGWRPvxziuuhB+XbsU/VyutS2g3urWbHOil3lk025PH:pEhhLGaJyB+XbH/XSX+rWbjlVklPH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13990

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogA GetProcAddress LoadLibraryA LocalAlloc ExitThread FindResourceA GetConsoleAliasExesLengthA GetCPInfoExA FindResourceW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler MoveFileA PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsA GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA lstrcpynA CopyFileW InterlockedDecrement SetFileApisToANSI GetModuleHandleA GetTickCount GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing