file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221221-3q5eksdf28
SHA256 312d1edf81e34fd80ee1f9acb91a5d22226212200793a83b44fdaae669028a94
MD5 e89e486f82f23948083ee98814cf0f9a
SHA1 b37c3d533ad86119f5d0e2b1d666358960f96507
SHA512 12a782d07068be32d65d99586918c1764f34c59390b2ac6ff0ff5ffd8c617f30e1519fc1705c865e57f46b1fba12e8e58d6f6a0d61b5e08aaa8963f6a5e0d085
SSDEEP 3072:1jhe2LsNtzm5CZDl2fisWdfSxImykBm/BRPLW4P84nMcYXcNQK1+eJV5u43:/xLsNtJZDEfisWMvfBmZRTW85CeRu4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH cf7c97ac1ed6302296908aa41b425ccb
SHA256 312d1edf81e34fd80ee1f9acb91a5d22226212200793a83b44fdaae669028a94
MD5 e89e486f82f23948083ee98814cf0f9a
SHA1 b37c3d533ad86119f5d0e2b1d666358960f96507
SHA512 12a782d07068be32d65d99586918c1764f34c59390b2ac6ff0ff5ffd8c617f30e1519fc1705c865e57f46b1fba12e8e58d6f6a0d61b5e08aaa8963f6a5e0d085
SSDEEP 3072:1jhe2LsNtzm5CZDl2fisWdfSxImykBm/BRPLW4P84nMcYXcNQK1+eJV5u43:/xLsNtJZDEfisWMvfBmZRTW85CeRu4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15158

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc GetCPInfoExA ReadConsoleOutputA GetCommandLineW InterlockedExchange InterlockedExchangeAdd ReadConsoleOutputCharacterA ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags SetConsoleMode ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatA FindNextVolumeA OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructA InterlockedIncrement GetDiskFreeSpaceExA BackupRead SetVolumeMountPointW VirtualAlloc _hread GetSystemWindowsDirectoryA LoadModule lstrlenA CreateDirectoryW GlobalFindAtomA CreateActCtxW CopyFileW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExW CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedDecrement SetFileApisToANSI GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing