file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221220-zz1afabb23
SHA256 8b38c06a6b91eede30a4a0e8987ea59e2993db341ccaa82a02bec3d44f620668
MD5 a229f4a151d4c638293c84e50ba5c5ca
SHA1 2e5e8c9b469579e6734b3ae6dcced3ca37569a04
SHA512 b3738d6a043602c993848af9a7b3e2732b39402fd6a2daab208e44901cc7dcc338cc678894fe53b4be088f450754459c52eaa2b5b658cd42d7e3f73aa372ffe5
SSDEEP 3072:BNltILgLV5qspizUniXU6T11A7b/rBy5NHCDml:H8Lg2s0giD51QDBGCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 241a935e76603e74d79d8e3e8d24ba63
SHA256 8b38c06a6b91eede30a4a0e8987ea59e2993db341ccaa82a02bec3d44f620668
MD5 a229f4a151d4c638293c84e50ba5c5ca
SHA1 2e5e8c9b469579e6734b3ae6dcced3ca37569a04
SHA512 b3738d6a043602c993848af9a7b3e2732b39402fd6a2daab208e44901cc7dcc338cc678894fe53b4be088f450754459c52eaa2b5b658cd42d7e3f73aa372ffe5
SSDEEP 3072:BNltILgLV5qspizUniXU6T11A7b/rBy5NHCDml:H8Lg2s0giD51QDBGCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotW TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeA LocalFree LocalFlags LoadLibraryA GetNumberOfConsoleMouseButtons ZombifyActCtx SetConsoleCtrlHandler PeekNamedPipe GetCurrencyFormatA FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectA GetPrivateProfileIntA _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointA ClearCommBreak lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxA CopyFileW EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW DeactivateActCtx WriteFile MoveFileA GetLogicalDriveStringsW ResetEvent MoveFileExW OpenMutexA GetConsoleFontSize GetConsoleAliasExesLengthW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA FindResourceA InterlockedDecrement GetModuleHandleW GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing