file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample221224-rf4vhsaa86
SHA256 18b946d10fd3e8d8508fd47749aef1df080e2804b3457f2f4589da13065eaccf
MD5 3d52b82857feac862d6ec601f9e5471e
SHA1 09e77c2c329e24560f110d4ca3cd25fd8caeb5e9
SHA512 b9c988a616eaf971e3dd3a629f9078baeb03ba5187806f21353e38cb12027c3b05deff575a5f2bbdcfd6ba3cdd8b90949aed33e2c1b471a6ee0bdd790b7f59fb
SSDEEP 6144:FRQUMd4UvkL5kDhOM232DeAObEda2qVack6nqCd9jgl:FRRMyUvkLk25EdVcBal
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH 81084ac57f5d38e75d3a63cf80f4122a
SHA256 18b946d10fd3e8d8508fd47749aef1df080e2804b3457f2f4589da13065eaccf
MD5 3d52b82857feac862d6ec601f9e5471e
SHA1 09e77c2c329e24560f110d4ca3cd25fd8caeb5e9
SHA512 b9c988a616eaf971e3dd3a629f9078baeb03ba5187806f21353e38cb12027c3b05deff575a5f2bbdcfd6ba3cdd8b90949aed33e2c1b471a6ee0bdd790b7f59fb
SSDEEP 6144:FRQUMd4UvkL5kDhOM232DeAObEda2qVack6nqCd9jgl:FRRMyUvkLk25EdVcBal
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31407

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetFileInfoA ord3 SHGetFolderPathAndSubDirW

kernel32

LoadLibraryExW CreateFileW HeapSize GetProcessHeap GetProcAddress GetModuleHandleW MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess SetStdHandle RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary WriteConsoleW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

Sharing