file[.]exe | Triage™

General

Target
file.exe
Size 164KB
Sample221117-ng577aec43
SHA256 3eb7528f5910c05e73fa632aebcde1e2a6a1a9d5be83924eef17336403d1b183
MD5 bf5053b9cfbec74ce5270251f50b8b7b
SHA1 560b2f34715397ada97722093cf3e500fd7cdbc2
SHA512 94f5d45d3b923586857fa8e0e0b657f64d8d83dbffe1ebb666826e9e60b11b45a703f518c974bb219d3b6185b4243e8f8c7fc9c52e675722f88699740466bde1
SSDEEP 3072:o8akam0a8T8TmAg5uBRVaRT+ZSeM8kQQT7k3lNDS6Ge/VivD:rT0JITrjorLQnVNDS69
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 164KB

file.exe

IMPHASH c865b663de99943e25d9aa45ea006623
SHA256 3eb7528f5910c05e73fa632aebcde1e2a6a1a9d5be83924eef17336403d1b183
MD5 bf5053b9cfbec74ce5270251f50b8b7b
SHA1 560b2f34715397ada97722093cf3e500fd7cdbc2
SHA512 94f5d45d3b923586857fa8e0e0b657f64d8d83dbffe1ebb666826e9e60b11b45a703f518c974bb219d3b6185b4243e8f8c7fc9c52e675722f88699740466bde1
SSDEEP 3072:o8akam0a8T8TmAg5uBRVaRT+ZSeM8kQQT7k3lNDS6Ge/VivD:rT0JITrjorLQnVNDS69
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25415

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA EnumSystemCodePagesA LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW CopyFileExW ReadConsoleOutputCharacterW SetVolumeLabelW FatalExit VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressW GetCommandLineA GetVolumeInformationW CancelTimerQueueTimer DeleteTimerQueueTimer GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation GetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives VerifyVersionInfoA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

gdi32

GetCharWidth32A

Sharing