file[.]exe | Triage™

General

Target
file.exe
Size 222KB
Sample221117-mdncjaab8x
SHA256 ade73dfe97085c9f8ca7a82e097fa5196e4df60553a016a50e1e9fdf415e82b1
MD5 8039959cc5ff18725d7897018b847408
SHA1 6630a81660458f41db6c740f5c658f6eefcb5d83
SHA512 76c4fc47d6ad0f74f5e333bb0df103330ed879c7967bd06692e5bcc56ab5a427d3a2f18f990742b5b3da4480de52ffd220eb7c4a0fbfb922f664a5cb87ddb94f
SSDEEP 3072:8Z/z7u+lnvKMYCN3NwAg5FmzmnUBQUEq84jaELHsxNiw9/4mHnHCc+BC8BjqWFKP:qLplRlNYGdBQxiaouDJjHnHTD8BjjF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 222KB

file.exe

IMPHASH c865b663de99943e25d9aa45ea006623
SHA256 ade73dfe97085c9f8ca7a82e097fa5196e4df60553a016a50e1e9fdf415e82b1
MD5 8039959cc5ff18725d7897018b847408
SHA1 6630a81660458f41db6c740f5c658f6eefcb5d83
SHA512 76c4fc47d6ad0f74f5e333bb0df103330ed879c7967bd06692e5bcc56ab5a427d3a2f18f990742b5b3da4480de52ffd220eb7c4a0fbfb922f664a5cb87ddb94f
SSDEEP 3072:8Z/z7u+lnvKMYCN3NwAg5FmzmnUBQUEq84jaELHsxNiw9/4mHnHCc+BC8BjqWFKP:qLplRlNYGdBQxiaouDJjHnHTD8BjjF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25415

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA EnumSystemCodePagesA LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW CopyFileExW ReadConsoleOutputCharacterW SetVolumeLabelW FatalExit VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressW GetCommandLineA GetVolumeInformationW CancelTimerQueueTimer DeleteTimerQueueTimer GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation GetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives VerifyVersionInfoA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

gdi32

GetCharWidth32A

Sharing