file[.]exe | Triage™

General

Target
file.exe
Size 217KB
Sample221220-hs782agh78
SHA256 35d244906ab34798bdec9490a12b29276802c3b4f29129f2ba62a360ce033a6c
MD5 9d9b82059be46559ba1942ed427da8b9
SHA1 45eb44f5c3bf72e7c0258f1fbcf00d6a7a451cb6
SHA512 7480e0de6784e03443ade0df0a30071a1dee16f0ce694037877bf9d401c55ce23a3ad3ae467044e0367e10a797f99e978be11d04ae6e2953985b604e92f9e7f9
SSDEEP 3072:Ur5+tL3XOQq9RxKNtogldgtioFwKRwVe7b/XZg2NHCDml:Ut+tLnOQLfRdgMoi2fHCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 217KB

file.exe

IMPHASH 5e207e189c0f8bcfa91707b46251d4e6
SHA256 35d244906ab34798bdec9490a12b29276802c3b4f29129f2ba62a360ce033a6c
MD5 9d9b82059be46559ba1942ed427da8b9
SHA1 45eb44f5c3bf72e7c0258f1fbcf00d6a7a451cb6
SHA512 7480e0de6784e03443ade0df0a30071a1dee16f0ce694037877bf9d401c55ce23a3ad3ae467044e0367e10a797f99e978be11d04ae6e2953985b604e92f9e7f9
SSDEEP 3072:Ur5+tL3XOQq9RxKNtogldgtioFwKRwVe7b/XZg2NHCDml:Ut+tLnOQLfRdgMoi2fHCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21142

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FindResourceW FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeW LocalFree LocalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe GetCurrencyFormatA FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile ResetEvent MoveFileA OpenMutexA FindResourceA GetConsoleFontSize GetConsoleAliasExesLengthA InterlockedDecrement RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

Sharing