file[.]exe | Triage™

General

Target
file.exe
Size 357KB
Sample220916-mesnmsbahj
SHA256 5e1d69f4f539b3d126aa398e3596f706fc55207ad9fdd7285a5d267c1658087d
MD5 efdd86218f7105e3be71d2b129ef3959
SHA1 7973e79f183fc76dcdee17c1c319cd0c3d75ebc2
SHA512 fae0e30ef780304c1b67d17bf7f1e460a8c7990d1bddda3e42366493cb5a94ee379d3cc1e0d1d46885362854054034cbe3bf174d13bcda82048a08b0a3e02f4f
SSDEEP 6144:4xWHAaZhEzMqMIZ3d5cjx7Y05BPZc0EPniga:4xSAaTEzMqMI5d5Y5Broi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 357KB

file.exe

IMPHASH db4f8dd885859039e0236ac1afc9f55e
SHA256 5e1d69f4f539b3d126aa398e3596f706fc55207ad9fdd7285a5d267c1658087d
MD5 efdd86218f7105e3be71d2b129ef3959
SHA1 7973e79f183fc76dcdee17c1c319cd0c3d75ebc2
SHA512 fae0e30ef780304c1b67d17bf7f1e460a8c7990d1bddda3e42366493cb5a94ee379d3cc1e0d1d46885362854054034cbe3bf174d13bcda82048a08b0a3e02f4f
SSDEEP 6144:4xWHAaZhEzMqMIZ3d5cjx7Y05BPZc0EPniga:4xSAaTEzMqMI5d5Y5Broi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30338

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA UnlockFile InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputA WaitNamedPipeA CommConfigDialogA SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceW LoadLibraryW DeleteFileW CopyFileW FillConsoleOutputCharacterA WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputA GlobalGetAtomNameW GetShortPathNameA GetPrivateProfileStringW GetModuleHandleA GetProcAddress VirtualAlloc ReleaseActCtx GetConsoleAliasW FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesA lstrcpynA AddAtomA FreeConsole GetLongPathNameA GetLastError GetSystemDefaultLCID GetSystemDefaultLangID GlobalAlloc FindNextFileW OpenJobObjectA InitializeCriticalSection FindResourceExA _hwrite GlobalUnfix GetComputerNameA VerifyVersionInfoW SetFileShortNameW GetVolumeNameForVolumeMountPointA GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW LoadLibraryA CreateFileA CloseHandle RtlUnwind GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetFilePointer Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

ScreenToClient

gdi32

GetCharWidth32A GetCharacterPlacementA

msimg32

AlphaBlend

Sharing