file[.]exe | Triage™

General

Target
file.exe
Size 219KB
Sample221221-c8qe9sbe49
SHA256 f70f921db12a034f7ed693a9f0176b98e6bbf99b5d05e8584998c14547876102
MD5 482afa1fa70252281402dfa71c30bc1d
SHA1 ce5aabac28480cfeac9746a437a10d6f12d33f32
SHA512 ce817e109e6c9acae7d8d5ecdfab4fb1c66e4593b76a749140f0b04e8a30107142151ca3c9655d9145ee4c0c4077f5ed7cc429855b9f387741657a3216b4b3c7
SSDEEP 3072:78ycXLLkP1150t3Y16ozjYUjfG7iC9GhV7b/3tGptKfNHCDml:wyGLQPiI160jlfG7g/fcpo1Ca
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 219KB

file.exe

IMPHASH ccbe8c376bf2829135e5d685e0c31901
SHA256 f70f921db12a034f7ed693a9f0176b98e6bbf99b5d05e8584998c14547876102
MD5 482afa1fa70252281402dfa71c30bc1d
SHA1 ce5aabac28480cfeac9746a437a10d6f12d33f32
SHA512 ce817e109e6c9acae7d8d5ecdfab4fb1c66e4593b76a749140f0b04e8a30107142151ca3c9655d9145ee4c0c4077f5ed7cc429855b9f387741657a3216b4b3c7
SSDEEP 3072:78ycXLLkP1150t3Y16ozjYUjfG7iC9GhV7b/3tGptKfNHCDml:wyGLQPiI160jlfG7g/fcpo1Ca
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14902

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW SetFileApisToOEM EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotW TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeA LocalFree LocalFlags LoadLibraryA GetNumberOfConsoleMouseButtons ZombifyActCtx GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectA GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointW ClearCommBreak lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxA CopyFileW EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW GetCurrentActCtx WriteFile MoveFileA GetLogicalDriveStringsW ResetEvent MoveFileExW GetConsoleFontSize GetConsoleAliasExesLengthW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA FindResourceA AreFileApisANSI InterlockedDecrement GetModuleHandleW GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing