file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221221-qaccmscc82
SHA256 cae5cca6a41e03c5a5fd3a2527e4dc121268dca12df146ece74423ffdcaf28dc
MD5 e76c87d0635529f57d453c4cdacc4acd
SHA1 dd5548cbbd8b7f8f0d4b652aa5898e89668d9e22
SHA512 55952218a12c600d417d81f97a69cda596ec6de0bf968abd78bed30987efd64d259cf55b85fc13fe68705c3691f6d6544707a04d8a50bf3b187bb5acf4eae304
SSDEEP 3072:LJqIYeDLh45m51Ed/JruwKQi6roCsW4RQLW4P84n00lcNQK1+eJV5u48:IeDLh4BruRCofmW8500leRu4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 07c0dc852321b20c590d91c54a9fadfd
SHA256 cae5cca6a41e03c5a5fd3a2527e4dc121268dca12df146ece74423ffdcaf28dc
MD5 e76c87d0635529f57d453c4cdacc4acd
SHA1 dd5548cbbd8b7f8f0d4b652aa5898e89668d9e22
SHA512 55952218a12c600d417d81f97a69cda596ec6de0bf968abd78bed30987efd64d259cf55b85fc13fe68705c3691f6d6544707a04d8a50bf3b187bb5acf4eae304
SSDEEP 3072:LJqIYeDLh45m51Ed/JruwKQi6roCsW4RQLW4P84n00lcNQK1+eJV5u48:IeDLh4BruRCofmW8500leRu4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14822

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExA IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA CopyFileExW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FindResourceA FormatMessageA ContinueDebugEvent InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags SetConsoleMode ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatA FindNextVolumeW CreateActCtxW OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointW ClearCommBreak lstrlenA CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW GetCurrentActCtx WriteFile MoveFileA GetLogicalDriveStringsW ResetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedDecrement GetModuleHandleW GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing