file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221218-swbdksce88
SHA256 826c8deb1006155a2c9986b4371fcdfd63aeefd6d0668ac04ed0424756a79186
MD5 06147209bb3912359299a8a60a45bfd0
SHA1 6c5ede7601af477eadb8ffae77ac8664998704ef
SHA512 1065687e856a907ed4237d4133786135e342948553122ed6ea93629fb151ab9df48a9db2b36daddb1d54e7bbdac1e06ebfd1b74938a3896f9104c1137e742ec6
SSDEEP 3072:M5wf6EL32yrAqRhTnZWMWK5TSlDxkIgg3u5x0HOil3lk025PH:QsPL3vrAoZaK5O/p+X0jlVklPH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 0a73659603f5743398664267df75a188
SHA256 826c8deb1006155a2c9986b4371fcdfd63aeefd6d0668ac04ed0424756a79186
MD5 06147209bb3912359299a8a60a45bfd0
SHA1 6c5ede7601af477eadb8ffae77ac8664998704ef
SHA512 1065687e856a907ed4237d4133786135e342948553122ed6ea93629fb151ab9df48a9db2b36daddb1d54e7bbdac1e06ebfd1b74938a3896f9104c1137e742ec6
SSDEEP 3072:M5wf6EL32yrAqRhTnZWMWK5TSlDxkIgg3u5x0HOil3lk025PH:QsPL3vrAoZaK5O/p+X0jlVklPH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14198

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA CommConfigDialogW GetProcAddress LocalAlloc ExitThread FindResourceA GetConsoleAliasExesLengthA GetCPInfoExA FindResourceW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler MoveFileA PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsA BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA OpenJobObjectA lstrcpynA CopyFileW InterlockedDecrement SetFileApisToANSI GetTickCount GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

Sharing