file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221222-bc8fjadf77
SHA256 06e8f35d48458db2b3de125bc42e751574b651a5fefb3458f8edc9baabda3a4c
MD5 ecce12eee0fc7ed96c9b6fc55180572a
SHA1 ccdf7386dd6f75d0c3efd2508fbdd8724859e5a0
SHA512 437ce01380c3fca5f165fd13d38dce5d0b51175e4a4bb9e425dc71c68438fda098e8b9f575ddb4346e30afe15daa87478633812b2c8d3e18111b9940fd1792f6
SSDEEP 3072:8FbXLWQPL5nHaRcrXxSLBlfz3DvbnrMNCjgHbrJp+3LJVn:yDLDNHa8IBl7zTrMNCspELJV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 290bcab797eb2c14907ec082e0b22d17
SHA256 06e8f35d48458db2b3de125bc42e751574b651a5fefb3458f8edc9baabda3a4c
MD5 ecce12eee0fc7ed96c9b6fc55180572a
SHA1 ccdf7386dd6f75d0c3efd2508fbdd8724859e5a0
SHA512 437ce01380c3fca5f165fd13d38dce5d0b51175e4a4bb9e425dc71c68438fda098e8b9f575ddb4346e30afe15daa87478633812b2c8d3e18111b9940fd1792f6
SSDEEP 3072:8FbXLWQPL5nHaRcrXxSLBlfz3DvbnrMNCjgHbrJp+3LJVn:yDLDNHa8IBl7zTrMNCspELJV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15414

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA GetCPInfoExA GetCommandLineW InterlockedExchange InterlockedExchangeAdd ReadConsoleOutputCharacterA ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags SetConsoleMode ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatA FindNextVolumeA OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructA InterlockedIncrement GetDiskFreeSpaceExA BackupRead SetVolumeMountPointW VirtualAlloc _hread GetSystemWindowsDirectoryA LoadModule lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxW CopyFileW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExW CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedDecrement GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing