file[.]exe | Triage™

General

Target
file.exe
Size 347KB
Sample221116-dk69jsch2t
SHA256 661fa609dc9a04ca2fb248b55e22c1e438b605db8b88ea7d5ea26f1110521906
MD5 5002749cd4cd40ee1f3cc5bcd5a4553b
SHA1 9c69f483fd87676b47d8ea47a0d095bf3d6eef08
SHA512 7b89dce639e53124042f7ebf8f28a64bb6a6f509603345fc3aded5779a1fa0ac212ea6675c5c925a1d9f21265e78174c622b68588f79eef1c914786940c4daed
SSDEEP 6144:BfHOdX3xQ0FC+db6uVWxwKm8uDGLa4zNyPt0V4:BPAxJUgbTWmz8uKLa4zNye
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 347KB

file.exe

IMPHASH b16ac9aa2cf798d442762ac865cf7759
SHA256 661fa609dc9a04ca2fb248b55e22c1e438b605db8b88ea7d5ea26f1110521906
MD5 5002749cd4cd40ee1f3cc5bcd5a4553b
SHA1 9c69f483fd87676b47d8ea47a0d095bf3d6eef08
SHA512 7b89dce639e53124042f7ebf8f28a64bb6a6f509603345fc3aded5779a1fa0ac212ea6675c5c925a1d9f21265e78174c622b68588f79eef1c914786940c4daed
SSDEEP 6144:BfHOdX3xQ0FC+db6uVWxwKm8uDGLa4zNyPt0V4:BPAxJUgbTWmz8uKLa4zNye
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW OpenMutexW CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

Sharing