file[.]exe | Triage™

General

Target
file.exe
Size 252KB
Sample221115-yem9psfe63
SHA256 e6a34ba64f6715668e1a02758bb74bcdc92a2d0bd8f11ad37f397988420d30a2
MD5 c75a43cc1ff97d19cd7afe01ce0c1f93
SHA1 93f078009e93f1264122e54fd75cab2ef5f65fc3
SHA512 8e43022c2f08995505233c764b9ca9f834ff28f98ec8ddeecf3c0fe37495ea3c391d234ad947e3d06cb029398e623486f479bdf688706b87c152e323fb7020aa
SSDEEP 3072:ENr/e7X53I3Mnrr/zkazoWy8VdrChSJEDtEcTo8jJFZPBuFe0DtoJPdYlvDm2Er+:Sr2W2/FFy8HWhSOPTNFR0Fz7tO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 252KB

file.exe

IMPHASH 973841b0a1fe69a6d3aad3ba9b351e8b
SHA256 e6a34ba64f6715668e1a02758bb74bcdc92a2d0bd8f11ad37f397988420d30a2
MD5 c75a43cc1ff97d19cd7afe01ce0c1f93
SHA1 93f078009e93f1264122e54fd75cab2ef5f65fc3
SHA512 8e43022c2f08995505233c764b9ca9f834ff28f98ec8ddeecf3c0fe37495ea3c391d234ad947e3d06cb029398e623486f479bdf688706b87c152e323fb7020aa
SSDEEP 3072:ENr/e7X53I3Mnrr/zkazoWy8VdrChSJEDtEcTo8jJFZPBuFe0DtoJPdYlvDm2Er+:Sr2W2/FFy8HWhSOPTNFR0Fz7tO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA EnumSystemCodePagesA LocalFree FindNextFileW OpenMutexA CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

Sharing