file[.]exe | Triage™

General

Target
file.exe
Size 213KB
Sample221218-q2dpsafa4x
SHA256 134bc4d2beb4700009e80cae0762f731a3a39703ca6fce6e201eec1cb1ffdb7a
MD5 3d48f9b1cffcb891d25e1d6f5abe73f9
SHA1 b6da7a3845938c8c0cc8384bf87bde8a95831609
SHA512 52fb7b114b2a123b72ac6ba7dca3b4c797e9d2a1694a067c4af75486f55cc8b3057e836a6e15ece651d9e3bf1c6a4ec410c7d8d5c06868bab15aeedfef325160
SSDEEP 3072:9rwYRkLmTvNPRqKoSF5XnBym2PYgmvnfcg3un3dLN1HOil3lk025PH:S5LwGmfQm2PYgmvnl+nX1jlVklPH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 213KB

file.exe

IMPHASH 0a73659603f5743398664267df75a188
SHA256 134bc4d2beb4700009e80cae0762f731a3a39703ca6fce6e201eec1cb1ffdb7a
MD5 3d48f9b1cffcb891d25e1d6f5abe73f9
SHA1 b6da7a3845938c8c0cc8384bf87bde8a95831609
SHA512 52fb7b114b2a123b72ac6ba7dca3b4c797e9d2a1694a067c4af75486f55cc8b3057e836a6e15ece651d9e3bf1c6a4ec410c7d8d5c06868bab15aeedfef325160
SSDEEP 3072:9rwYRkLmTvNPRqKoSF5XnBym2PYgmvnfcg3un3dLN1HOil3lk025PH:S5LwGmfQm2PYgmvnl+nX1jlVklPH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14198

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogW GetProcAddress LocalAlloc ExitThread FindResourceA GetConsoleAliasExesLengthA GetCPInfoExA FindResourceW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler MoveFileA PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsA BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA lstrcpynA CopyFileW InterlockedDecrement SetFileApisToANSI GetTickCount GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing