file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221221-akfvtabd29
SHA256 f8969e8623074995f5b9e8bf55f625b38168d75fa5787dff1101f0308d499479
MD5 8ffaddbc8a520ba81e4f8463b0d5e9de
SHA1 f18f33a1f802a42de1e9f0160a547b28b339cd58
SHA512 948e45046085c786026c541db85d4a57d27350f79a3d79af04c4b04e485c697f2790f4e0e407e299db55edb67e5bf9c7348a19506024f28e4f573741394482c8
SSDEEP 3072:1dHYl8LbnM15YQsnUk+Ns/q+2rsZqLHIkM7b/avS1NHCDml:7TLbNFnUkUs/q+u+qLHdUCvWCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH 82878659f40471b5044f316586cee714
SHA256 f8969e8623074995f5b9e8bf55f625b38168d75fa5787dff1101f0308d499479
MD5 8ffaddbc8a520ba81e4f8463b0d5e9de
SHA1 f18f33a1f802a42de1e9f0160a547b28b339cd58
SHA512 948e45046085c786026c541db85d4a57d27350f79a3d79af04c4b04e485c697f2790f4e0e407e299db55edb67e5bf9c7348a19506024f28e4f573741394482c8
SSDEEP 3072:1dHYl8LbnM15YQsnUk+Ns/q+2rsZqLHIkM7b/avS1NHCDml:7TLbNFnUkUs/q+u+qLHdUCvWCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW SetFileApisToOEM EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotW TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeA LocalFree LocalFlags LoadLibraryA GetNumberOfConsoleMouseButtons ZombifyActCtx GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectA GetPrivateProfileIntA _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointW ClearCommBreak lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxA CopyFileW EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW GetCurrentActCtx WriteFile MoveFileA GetLogicalDriveStringsW ResetEvent MoveFileExW GetConsoleFontSize GetConsoleAliasExesLengthW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA FindResourceA AreFileApisANSI InterlockedDecrement GetModuleHandleW GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing