file[.]exe | Triage™

General

Target
file.exe
Size 222KB
Sample221117-j6pvaaaa3x
SHA256 7bf42f9cfae3a65eefea75d1b120c115b5d9dab141bf77e0adb20bb697b130b4
MD5 9227158269769bcd400372ff2a5cea4a
SHA1 870a1d17cf495a8c760b58120baafdeccaa19cc9
SHA512 2bbe52c8cd9880fccb18d3077c2f07eaf3c9e710c2be99cc9ab1cc512b18f38b5625d68c6ad462f4af2f112fa50b3b1269fdb5e375c0cc86641cafd611731426
SSDEEP 6144:Lkyyg4cUUUewuVjDPY85wrhYRaP8K11uWh:LqnuZpwrhYq4u
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 222KB

file.exe

IMPHASH f0ecadf319458e04f8a407153b2b863b
SHA256 7bf42f9cfae3a65eefea75d1b120c115b5d9dab141bf77e0adb20bb697b130b4
MD5 9227158269769bcd400372ff2a5cea4a
SHA1 870a1d17cf495a8c760b58120baafdeccaa19cc9
SHA512 2bbe52c8cd9880fccb18d3077c2f07eaf3c9e710c2be99cc9ab1cc512b18f38b5625d68c6ad462f4af2f112fa50b3b1269fdb5e375c0cc86641cafd611731426
SSDEEP 6144:Lkyyg4cUUUewuVjDPY85wrhYRaP8K11uWh:LqnuZpwrhYq4u
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA EnumSystemCodePagesA LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW CopyFileExW ReadConsoleOutputCharacterW SetVolumeLabelW FatalExit VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressW GetCommandLineA GetVolumeInformationW DeleteTimerQueue DeleteTimerQueueTimer GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives VerifyVersionInfoA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

gdi32

GetCharWidth32A

Sharing