file[.]exe | Triage™

General

Target
file.exe
Size 195KB
Sample221115-2rnmsacb61
SHA256 08f14369c26b67f07731b049dba973759bb8da2c5f47bcbc0ec43454579d9ca3
MD5 ba22945c63f35174ae8ac4615b8f6cfd
SHA1 cb7d0ccf99e653c20d58897f7b554b03792f499a
SHA512 e4a694e8aeb7928c73bfaf8b772025af141b51fe6306baa58c40aedb4e8461d4fec3203faf6712814e0b42b94c832a8d1bf41c2cd2562d3aa3ca3c93db9c55da
SSDEEP 3072:Z5HKzvyq5twjkxa2Htzw8gFqdCBoY5Lnv2EPdYlvsdurkHD:zH0v3wjkxDwhFqdvyLn0tsd6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 195KB

file.exe

IMPHASH da4d9e635f7f54701e49245bae5e7151
SHA256 08f14369c26b67f07731b049dba973759bb8da2c5f47bcbc0ec43454579d9ca3
MD5 ba22945c63f35174ae8ac4615b8f6cfd
SHA1 cb7d0ccf99e653c20d58897f7b554b03792f499a
SHA512 e4a694e8aeb7928c73bfaf8b772025af141b51fe6306baa58c40aedb4e8461d4fec3203faf6712814e0b42b94c832a8d1bf41c2cd2562d3aa3ca3c93db9c55da
SSDEEP 3072:Z5HKzvyq5twjkxa2Htzw8gFqdCBoY5Lnv2EPdYlvsdurkHD:zH0v3wjkxDwhFqdvyLn0tsd6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14935

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW OpenMutexA CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

Sharing