file[.]exe | Triage™

General

Target
file.exe
Size 347KB
Sample221116-bdsfpsgf85
SHA256 3e617c520c6a753466b4bb72407280f8eb1cd7682a016c243dd38ffa7ba912eb
MD5 83f79d83352070e91765950b1ae81c16
SHA1 593185668a4f6b93d3c78639f484378f03c35ef7
SHA512 a918896a6594661632b36cfea40bbc55285114ae80217cde4ee63be1fe759493bde3afe2238be63c4bf4a53a9854d7e68dc0733b85ae80918adb19eec1080b38
SSDEEP 6144:+B5JMv0ES04DLNrAza/A/Gtdn0N8kQC7VVjyiqqpLJJUtP:+B5J40Ev0SzaI/GtCNTQxkLJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 347KB

file.exe

IMPHASH b16ac9aa2cf798d442762ac865cf7759
SHA256 3e617c520c6a753466b4bb72407280f8eb1cd7682a016c243dd38ffa7ba912eb
MD5 83f79d83352070e91765950b1ae81c16
SHA1 593185668a4f6b93d3c78639f484378f03c35ef7
SHA512 a918896a6594661632b36cfea40bbc55285114ae80217cde4ee63be1fe759493bde3afe2238be63c4bf4a53a9854d7e68dc0733b85ae80918adb19eec1080b38
SSDEEP 6144:+B5JMv0ES04DLNrAza/A/Gtdn0N8kQC7VVjyiqqpLJJUtP:+B5J40Ev0SzaI/GtCNTQxkLJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW OpenMutexW CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

Sharing