file[.]exe | Triage™

General

Target
file.exe
Size 347KB
Sample221116-efmj1sha72
SHA256 68c4cca6b40f4a0bb6b07d561915c8cbd3146a2baaffaa720c6b0e5fe7d524c0
MD5 931f5657bf177cfe34903152abd73f98
SHA1 b13d14753a005337e973a4b380e2ed2b2dea8d21
SHA512 37eae0b2f7be6332150d5a7712679b870ed653b748b45c517905bc12cc9b4b0b1317fd97a2b536efc70851c67e31aae97781c88f4713b197235bcd6e4110f20b
SSDEEP 6144:ei7tkFCsnrPMXrjZARnGE0htQUhBY+NRyxqP6NCStBjPm:T5kFCmrCrdA1I3YIRyIP6kIjP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 347KB

file.exe

IMPHASH b16ac9aa2cf798d442762ac865cf7759
SHA256 68c4cca6b40f4a0bb6b07d561915c8cbd3146a2baaffaa720c6b0e5fe7d524c0
MD5 931f5657bf177cfe34903152abd73f98
SHA1 b13d14753a005337e973a4b380e2ed2b2dea8d21
SHA512 37eae0b2f7be6332150d5a7712679b870ed653b748b45c517905bc12cc9b4b0b1317fd97a2b536efc70851c67e31aae97781c88f4713b197235bcd6e4110f20b
SSDEEP 6144:ei7tkFCsnrPMXrjZARnGE0htQUhBY+NRyxqP6NCStBjPm:T5kFCmrCrdA1I3YIRyIP6kIjP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW OpenMutexW CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

Sharing