file[.]exe | Triage™

General

Target
file.exe
Size 221KB
Sample221221-jptrxaeh9y
SHA256 e4fc468628b2118964e3abd7eb4288a43e44b3aca95ef4cb80515b2bafe44d78
MD5 ac7126da4831d7ec3887bad4f1a53142
SHA1 6f9c9fefa1ec64d7723d5491f22088ed0e9d1b03
SHA512 e0670c040940b2f36e1b19517287b424e9658c283a3bf4b1ceee72774c09f466ffed469858e1460bc6ce23faee25f58f689a6f6b9edae2e8c935e531b95ea15b
SSDEEP 3072:cTEAHLIarZt15j4gOdvRx1JKlW5E9G4GjgJG3Pi7b/dK7YbSNHCDml:YECLIwxmtSZG3KVMCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 221KB

file.exe

IMPHASH 696649fc14aa349944c0462e6b1bdb06
SHA256 e4fc468628b2118964e3abd7eb4288a43e44b3aca95ef4cb80515b2bafe44d78
MD5 ac7126da4831d7ec3887bad4f1a53142
SHA1 6f9c9fefa1ec64d7723d5491f22088ed0e9d1b03
SHA512 e0670c040940b2f36e1b19517287b424e9658c283a3bf4b1ceee72774c09f466ffed469858e1460bc6ce23faee25f58f689a6f6b9edae2e8c935e531b95ea15b
SSDEEP 3072:cTEAHLIarZt15j4gOdvRx1JKlW5E9G4GjgJG3Pi7b/dK7YbSNHCDml:YECLIwxmtSZG3KVMCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14902

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW SetFileApisToOEM EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FormatMessageA ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeA LocalFree LocalFlags LoadLibraryA GetNumberOfConsoleMouseButtons ZombifyActCtx GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectA GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointW ClearCommBreak lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxA CopyFileW EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW GetCurrentActCtx WriteFile MoveFileA GetLogicalDriveStringsW ResetEvent MoveFileExW GetConsoleFontSize GetConsoleAliasExesLengthW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA FindResourceA AreFileApisANSI InterlockedDecrement GetModuleHandleW GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing