file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221222-e9dh7sdh42
SHA256 f32b45f52b74d6f4366cbe3316a6c0236cb25f851a704ee33edfa9e0d929d61b
MD5 e0143094b2e79b6982f24adc25390231
SHA1 ede56a09454c728ef81b6829f8d56859a018e97d
SHA512 12c80d325c7f57bf8e503c1ccd6853a95c1ad8ca4f99caf302d4e2166759e186c440a44d652f8b4f39a25d275cd9531581e33aed66879c9706397069a9fa00f5
SSDEEP 3072:Qt6FvLOyiL5i+GbuM8PRiPW7fdT2nPre+rMNCjg2/N4xMc9p+3LJVn:m+vLh8GbuMIoWf12DfMNCs2/NGELJV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 290bcab797eb2c14907ec082e0b22d17
SHA256 f32b45f52b74d6f4366cbe3316a6c0236cb25f851a704ee33edfa9e0d929d61b
MD5 e0143094b2e79b6982f24adc25390231
SHA1 ede56a09454c728ef81b6829f8d56859a018e97d
SHA512 12c80d325c7f57bf8e503c1ccd6853a95c1ad8ca4f99caf302d4e2166759e186c440a44d652f8b4f39a25d275cd9531581e33aed66879c9706397069a9fa00f5
SSDEEP 3072:Qt6FvLOyiL5i+GbuM8PRiPW7fdT2nPre+rMNCjg2/N4xMc9p+3LJVn:m+vLh8GbuMIoWf12DfMNCs2/NGELJV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15414

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA GetCPInfoExA GetCommandLineW InterlockedExchange InterlockedExchangeAdd ReadConsoleOutputCharacterA ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags SetConsoleMode ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatA FindNextVolumeA OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructA InterlockedIncrement GetDiskFreeSpaceExA BackupRead SetVolumeMountPointW VirtualAlloc _hread GetSystemWindowsDirectoryA LoadModule lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxW CopyFileW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExW CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedDecrement GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing