file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221218-rf4vhscc64
SHA256 0d3142ce501b68a4e231c6a54159ec2cf08ffb6f6994a31ec21ef42c7e80065c
MD5 c24741030906a3e782744ccbc8ef242f
SHA1 c96e93667ff25c10191aa100aa8b72be9436d542
SHA512 aeb3dad74dcc481c6ed4375cd17c418bfbbf544c63eb22ea2d392315e240675987b38bd25b9ce909f78d258175199749b073a7fa0b70e41e864634434172d0c4
SSDEEP 3072:kg+ce0LFyj/RQgw6zaGIRyy0XzMG7hSjSUg3ufKumqfmHOil3lk025PH:tZzLFim4UizZ1aI+fKuAjlVklPH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 0a73659603f5743398664267df75a188
SHA256 0d3142ce501b68a4e231c6a54159ec2cf08ffb6f6994a31ec21ef42c7e80065c
MD5 c24741030906a3e782744ccbc8ef242f
SHA1 c96e93667ff25c10191aa100aa8b72be9436d542
SHA512 aeb3dad74dcc481c6ed4375cd17c418bfbbf544c63eb22ea2d392315e240675987b38bd25b9ce909f78d258175199749b073a7fa0b70e41e864634434172d0c4
SSDEEP 3072:kg+ce0LFyj/RQgw6zaGIRyy0XzMG7hSjSUg3ufKumqfmHOil3lk025PH:tZzLFim4UizZ1aI+fKuAjlVklPH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14198

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogW GetProcAddress LocalAlloc ExitThread FindResourceA GetConsoleAliasExesLengthA GetCPInfoExA FindResourceW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler MoveFileA PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsA BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA lstrcpynA CopyFileW InterlockedDecrement SetFileApisToANSI GetTickCount GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing