file[.]exe | Triage™

General

Target
file.exe
Size 253KB
Sample221116-e2h4qahb47
SHA256 44914b6b91cde799a3bd2b211f38bb3f0eae1b4c230eb9b036da918df3f3be9d
MD5 9bfa9d5a1e95bbb91412bf23beec7c25
SHA1 a4950348a67d0abc0eafbdabd464fffea606cb53
SHA512 f4d97c8ccd3f6a7d05453947c0c56b017f6a7c5fa947c3d16a8949c9fe1069a7a2b1ff8cae48548b705c4daa6baec0c16c00103c90a9079c9b55371e0c61ba2b
SSDEEP 3072:rwojUu5OqLyk2mz1UXGZK1VzbEX+2VmjaFcYsKtiCLf1/mTPdYlvM6trkHD:kyXLy9mz1oG853jVKtBTJtM6t
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 253KB

file.exe

IMPHASH b16ac9aa2cf798d442762ac865cf7759
SHA256 44914b6b91cde799a3bd2b211f38bb3f0eae1b4c230eb9b036da918df3f3be9d
MD5 9bfa9d5a1e95bbb91412bf23beec7c25
SHA1 a4950348a67d0abc0eafbdabd464fffea606cb53
SHA512 f4d97c8ccd3f6a7d05453947c0c56b017f6a7c5fa947c3d16a8949c9fe1069a7a2b1ff8cae48548b705c4daa6baec0c16c00103c90a9079c9b55371e0c61ba2b
SSDEEP 3072:rwojUu5OqLyk2mz1UXGZK1VzbEX+2VmjaFcYsKtiCLf1/mTPdYlvM6trkHD:kyXLy9mz1oG853jVKtBTJtM6t
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW OpenMutexW CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

Sharing