file[.]exe | Triage™

General

Target
file.exe
Size 194KB
Sample221115-lhmfcscc4w
SHA256 21d0aef4c252aad1e6095e66cb4fe34d11fbdc6bc13ee280040aee14dbae44b4
MD5 2a3d9afdf96fa3a9ecd4a6e718167e99
SHA1 c8137baf09299e233eb43625a56b29e4c1c6afa2
SHA512 1ca414f56b04210511d0751a86f92c8a0c19709c368a30265536fa91398b22492b10e4a7454fc0b008484d61c1ae28125a2ce898f6c1d5b62cb0e05e58b6c9f5
SSDEEP 3072:M2TOunO5gp5rijGWCEjDazwFb5flTsIGRfRARz:2uJ+jO4Jb5dD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH ec71479fb52ad935f1b8a4555a804492
SHA256 21d0aef4c252aad1e6095e66cb4fe34d11fbdc6bc13ee280040aee14dbae44b4
MD5 2a3d9afdf96fa3a9ecd4a6e718167e99
SHA1 c8137baf09299e233eb43625a56b29e4c1c6afa2
SHA512 1ca414f56b04210511d0751a86f92c8a0c19709c368a30265536fa91398b22492b10e4a7454fc0b008484d61c1ae28125a2ce898f6c1d5b62cb0e05e58b6c9f5
SSDEEP 3072:M2TOunO5gp5rijGWCEjDazwFb5flTsIGRfRARz:2uJ+jO4Jb5dD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15079

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesW LocalFree FindNextFileW OpenMutexA CopyFileExA SetDefaultCommConfigW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceW EnumCalendarInfoExA LocalFlags TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryW GetModuleHandleA VirtualAlloc CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA GetNamedPipeInfo GetCPInfoExA SearchPathA RequestWakeupLatency CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressA CancelTimerQueueTimer DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation InterlockedExchangeAdd SetConsoleTitleW GetPrivateProfileStructA InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetTickCount SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoW TerminateThread MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP SetProcessAffinityMask CreateDirectoryExA GlobalFindAtomW GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

Sharing