file[.]exe | Triage™

General

Target
file.exe
Size 218KB
Sample221220-mch2escd51
SHA256 a33c3618f8d60691a4e53503b3e8f50c2232d793bc8d3bf99cd635b56adab70c
MD5 5ad49eaba52503675fb38b2c536da989
SHA1 0685620879dc35540d9bf40cc1725ad1897787f7
SHA512 96ddaf996819a6e7b01213961d8e4baa5bb0630ad953eeb8f20706bcc42347ef441b18bd6fcee6f3c0ab24c129c537a7996b3fd6697522deed1c6ad8c23f3cce
SSDEEP 3072:kzJz2keELagU9RjfTAEISN8rdOlDnIZ7F2MB7b/iY8uW5F9rvYNHCDml:kRdlLB2MbS+mTIZ7FJZH8zf9LSCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 218KB

file.exe

IMPHASH 5e207e189c0f8bcfa91707b46251d4e6
SHA256 a33c3618f8d60691a4e53503b3e8f50c2232d793bc8d3bf99cd635b56adab70c
MD5 5ad49eaba52503675fb38b2c536da989
SHA1 0685620879dc35540d9bf40cc1725ad1897787f7
SHA512 96ddaf996819a6e7b01213961d8e4baa5bb0630ad953eeb8f20706bcc42347ef441b18bd6fcee6f3c0ab24c129c537a7996b3fd6697522deed1c6ad8c23f3cce
SSDEEP 3072:kzJz2keELagU9RjfTAEISN8rdOlDnIZ7F2MB7b/iY8uW5F9rvYNHCDml:kRdlLB2MbS+mTIZ7FJZH8zf9LSCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21142

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FindResourceW FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeW LocalFree LocalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe GetCurrencyFormatA FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile ResetEvent MoveFileA OpenMutexA FindResourceA GetConsoleFontSize GetConsoleAliasExesLengthA InterlockedDecrement RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

Sharing