file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221222-ejg4psha6w
SHA256 32a75b79046208655359f0c660c31bc20c85e60c64d886db12a0d1016ed0dcf3
MD5 8c0cc8a04a8e4258be1ee2b642a73982
SHA1 5d898cc748e18381590a6690698b154292c860de
SHA512 db57b12981ef6816b481d42e767cb70e13ae0a2d3f0b0a8a1b57ba6e50e94d15668e0970f223196a0969f0fc345df71b6773611eae8b216ab3ed0bcceef0586a
SSDEEP 3072:FnTBclLiggL5tqODmppOTG4eCI6GfJTm2rMNCjgVDCp+3LJVn:pILv8qOsITHVGBSSMNCsQELJV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 290bcab797eb2c14907ec082e0b22d17
SHA256 32a75b79046208655359f0c660c31bc20c85e60c64d886db12a0d1016ed0dcf3
MD5 8c0cc8a04a8e4258be1ee2b642a73982
SHA1 5d898cc748e18381590a6690698b154292c860de
SHA512 db57b12981ef6816b481d42e767cb70e13ae0a2d3f0b0a8a1b57ba6e50e94d15668e0970f223196a0969f0fc345df71b6773611eae8b216ab3ed0bcceef0586a
SSDEEP 3072:FnTBclLiggL5tqODmppOTG4eCI6GfJTm2rMNCjgVDCp+3LJVn:pILv8qOsITHVGBSSMNCsQELJV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15414

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA GetCPInfoExA GetCommandLineW InterlockedExchange InterlockedExchangeAdd ReadConsoleOutputCharacterA ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags SetConsoleMode ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatA FindNextVolumeA OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread FreeEnvironmentStringsW GetPrivateProfileStructA InterlockedIncrement GetDiskFreeSpaceExA BackupRead SetVolumeMountPointW VirtualAlloc _hread GetSystemWindowsDirectoryA LoadModule lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxW CopyFileW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExW CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedDecrement GetTickCount SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

Sharing