file[.]exe | Triage™

General

Target
file.exe
Size 241KB
Sample221221-m9pkgacb69
SHA256 e571ff508ec99e5039458b4e0aa2f2badd6f2417371f9d406427d8d055f2d63e
MD5 f5967870b1eb3d4354d6041e09742610
SHA1 8a5e04682d1c4a25b41782ec66f82fd669026237
SHA512 fcaa5f6e4c4d430a0f748445b71e26c86c55fca83c933d11b8f26fe7423e523da8a143c52522c942e14064fecf44f31d741b478878a48bdad8c8a4c6eebebfb5
SSDEEP 3072:IV/fLL3VU2DJF5yfV+J+GpJtPzIoHS8d8rLW4P84nuSe4yHWzcNQK1+eJV5u48:+DLFU8IfQJLvNIwbd8PW85Re32zeRu4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 241KB

file.exe

IMPHASH 60c40f8e047893d4dd21bf4ec0394112
SHA256 e571ff508ec99e5039458b4e0aa2f2badd6f2417371f9d406427d8d055f2d63e
MD5 f5967870b1eb3d4354d6041e09742610
SHA1 8a5e04682d1c4a25b41782ec66f82fd669026237
SHA512 fcaa5f6e4c4d430a0f748445b71e26c86c55fca83c933d11b8f26fe7423e523da8a143c52522c942e14064fecf44f31d741b478878a48bdad8c8a4c6eebebfb5
SSDEEP 3072:IV/fLL3VU2DJF5yfV+J+GpJtPzIoHS8d8rLW4P84nuSe4yHWzcNQK1+eJV5u48:+DLFU8IfQJLvNIwbd8PW85Re32zeRu4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15046

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA CopyFileExW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FindResourceA FormatMessageA ContinueDebugEvent InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags SetConsoleMode ZombifyActCtx GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatA FindNextVolumeW CreateActCtxW OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointW ClearCommBreak lstrlenA CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW GetCurrentActCtx WriteFile MoveFileA GetLogicalDriveStringsW ResetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedDecrement GetModuleHandleW GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing