file[.]exe | Triage™

General

Target
file.exe
Size 219KB
Sample221221-d1bsksbe86
SHA256 f9e572f9465977aed4fae86fa2829c1539d97530d973296933f30ba66878a930
MD5 4a6bda5091bfa8ff771fd84b67d5c09a
SHA1 f8dde66fded3b9062b5ffbea8a9e6eb5aa967df3
SHA512 f90a1e73a2af0b7a8120925f0f1c257f3076ace27f06b783ecd7227b5dd82d12140e293c7ecd4a33a6a64a81f8d63aedc2896b5bc9ed0dfb3169c444377cafac
SSDEEP 3072:CR/CZjLHHD115gNbxH3euvrGtQ6093+V7b/67YS9de0mNHCDml:8/eLnDe7uV093my7YSLmCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 219KB

file.exe

IMPHASH ccbe8c376bf2829135e5d685e0c31901
SHA256 f9e572f9465977aed4fae86fa2829c1539d97530d973296933f30ba66878a930
MD5 4a6bda5091bfa8ff771fd84b67d5c09a
SHA1 f8dde66fded3b9062b5ffbea8a9e6eb5aa967df3
SHA512 f90a1e73a2af0b7a8120925f0f1c257f3076ace27f06b783ecd7227b5dd82d12140e293c7ecd4a33a6a64a81f8d63aedc2896b5bc9ed0dfb3169c444377cafac
SSDEEP 3072:CR/CZjLHHD115gNbxH3euvrGtQ6093+V7b/67YS9de0mNHCDml:8/eLnDe7uV093my7YSLmCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14902

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW SetFileApisToOEM EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotW TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeA LocalFree LocalFlags LoadLibraryA GetNumberOfConsoleMouseButtons ZombifyActCtx GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectA GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointW ClearCommBreak lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxA CopyFileW EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW GetCurrentActCtx WriteFile MoveFileA GetLogicalDriveStringsW ResetEvent MoveFileExW GetConsoleFontSize GetConsoleAliasExesLengthW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA FindResourceA AreFileApisANSI InterlockedDecrement GetModuleHandleW GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing