file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221220-vppnqsad78
SHA256 fcd1d9db12b10c5c8f804d71fd04d8bbc1a7a19595342b5d6ea7f8c1b4f161b1
MD5 80e3a635d7e15b2b555b97def09d1d25
SHA1 deeca1883754bfad5db41e7445a49c16d5ea265f
SHA512 ebcc28542a4a55cca9eab36944e1d823297d0587368a18b8d4e4b55bd58d27339c10c37c09ca6f270276555dbbae334075950d632a33e3be7dad4121ead0cb2c
SSDEEP 3072:yF4vLsgV5VQ6YEUueEyY98Qrk5YjNW+s7b/h5yjV+NHCDml:s+Lsx6YEhepyc+jNu552cCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 0138026f27a8120abebbb5ad66a72bf2
SHA256 fcd1d9db12b10c5c8f804d71fd04d8bbc1a7a19595342b5d6ea7f8c1b4f161b1
MD5 80e3a635d7e15b2b555b97def09d1d25
SHA1 deeca1883754bfad5db41e7445a49c16d5ea265f
SHA512 ebcc28542a4a55cca9eab36944e1d823297d0587368a18b8d4e4b55bd58d27339c10c37c09ca6f270276555dbbae334075950d632a33e3be7dad4121ead0cb2c
SSDEEP 3072:yF4vLsgV5VQ6YEUueEyY98Qrk5YjNW+s7b/h5yjV+NHCDml:s+Lsx6YEhepyc+jNu552cCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14950

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeA LocalFree LocalFlags LoadLibraryA GetNumberOfConsoleMouseButtons ZombifyActCtx SetConsoleCtrlHandler PeekNamedPipe GetCurrencyFormatA FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectA GetPrivateProfileIntA _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointA ClearCommBreak lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxA CopyFileW EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW DeactivateActCtx WriteFile MoveFileA GetLogicalDriveStringsW ResetEvent MoveFileExW OpenMutexA GetConsoleFontSize GetConsoleAliasExesLengthW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA FindResourceA InterlockedDecrement GetModuleHandleW GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing