file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221219-e5yzcahc3y
SHA256 c310d0edcdd86eb1dd50a009d6155f0ac7fa0aa2a1ea0fcc5f31cde0cd6c57c0
MD5 9440ff5415cf2658794a695ab8f2ff62
SHA1 9668a340d9dcbff04f50de0d5e526b26202f5c0a
SHA512 d73490b76fd4bf10b0e5f358f031adda481a7d38118ba8f76511f5b517de4ea62f927d5fe5a4d6e1ab906d95c3c0c5354324343dfaea4fdb789e892b5f9f6f0f
SSDEEP 3072:wHdoLpetaRi16PI/WuKF4s7Tlag/HladaNRAtOba+83DVjcbImdzmuX:w9oLpeZ16wuF75H880nVjcbXF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH c50bea46cfddfdc15672a96efbafed97
SHA256 c310d0edcdd86eb1dd50a009d6155f0ac7fa0aa2a1ea0fcc5f31cde0cd6c57c0
MD5 9440ff5415cf2658794a695ab8f2ff62
SHA1 9668a340d9dcbff04f50de0d5e526b26202f5c0a
SHA512 d73490b76fd4bf10b0e5f358f031adda481a7d38118ba8f76511f5b517de4ea62f927d5fe5a4d6e1ab906d95c3c0c5354324343dfaea4fdb789e892b5f9f6f0f
SSDEEP 3072:wHdoLpetaRi16PI/WuKF4s7Tlag/HladaNRAtOba+83DVjcbImdzmuX:w9oLpeZ16wuF75H880nVjcbXF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20790

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExA DeleteTimerQueueTimer FindResourceW FormatMessageW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsW BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile ResetEvent OpenMutexA FindResourceA GetConsoleFontSize GetConsoleAliasExesLengthA MoveFileA InterlockedDecrement RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW

user32

GetMessageExtraInfo

Sharing