file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221221-2tywjade86
SHA256 14f1c5fe5252ff9a7e4822fa16e763f691c0c64bd5ab2b2b29496fdc4913c0c5
MD5 130afbca34ff51b5656ebc40a6f3655d
SHA1 37d084f49a15ced7f7cf2c77a9c65edfcca7acd8
SHA512 c1569c24ce873343b33987f920cb1c0803669c33b039ca17a05e3b6285822db86d58151d4ebdd524cb2d550a7d9ddb463ae345137cc616f510678781bd21f521
SSDEEP 3072:Mz5DvxmLqGUm5msitOFE4gSqWzL887yvYLW4P84nPwW1NcNQK1+eJV5u43:4LwLqGsOeqJ7yvuW85PwW7eRu4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH cf7c97ac1ed6302296908aa41b425ccb
SHA256 14f1c5fe5252ff9a7e4822fa16e763f691c0c64bd5ab2b2b29496fdc4913c0c5
MD5 130afbca34ff51b5656ebc40a6f3655d
SHA1 37d084f49a15ced7f7cf2c77a9c65edfcca7acd8
SHA512 c1569c24ce873343b33987f920cb1c0803669c33b039ca17a05e3b6285822db86d58151d4ebdd524cb2d550a7d9ddb463ae345137cc616f510678781bd21f521
SSDEEP 3072:Mz5DvxmLqGUm5msitOFE4gSqWzL887yvYLW4P84nPwW1NcNQK1+eJV5u43:4LwLqGsOeqJ7yvuW85PwW7eRu4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15158

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExA ReadConsoleOutputA GetCommandLineW InterlockedExchange InterlockedExchangeAdd ReadConsoleOutputCharacterA ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags SetConsoleMode ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatA FindNextVolumeA OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructA InterlockedIncrement GetDiskFreeSpaceExA BackupRead SetVolumeMountPointW VirtualAlloc _hread GetSystemWindowsDirectoryA LoadModule lstrlenA CreateDirectoryW GlobalFindAtomA CreateActCtxW CopyFileW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExW CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedDecrement SetFileApisToANSI GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing