file[.]exe | Triage™

General

Target
file.exe
Size 164KB
Sample221117-nvkhmsac9x
SHA256 41ba8b23261f263ddf53c94df2c776bcf4b100c46f39bebaccd1e0ee54f696ab
MD5 b4a23677748b413c396d816f0fc84330
SHA1 598420f5aee2eca4a78e6cc0e1fb8a4cd2f5bf6d
SHA512 95a3e2a2b16000f599f7a535eb0b5ca5f45741d1e88bf78141ef687b6aec228acff847196c2ddfc1a75e2efe7d46469656e1449e6278539b17d25b9c8ea94339
SSDEEP 3072:Da34z4WZ53xM3qg55qYe1xHng0fOCUGzo3D:D3X+3ZqhxXO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 164KB

file.exe

IMPHASH c865b663de99943e25d9aa45ea006623
SHA256 41ba8b23261f263ddf53c94df2c776bcf4b100c46f39bebaccd1e0ee54f696ab
MD5 b4a23677748b413c396d816f0fc84330
SHA1 598420f5aee2eca4a78e6cc0e1fb8a4cd2f5bf6d
SHA512 95a3e2a2b16000f599f7a535eb0b5ca5f45741d1e88bf78141ef687b6aec228acff847196c2ddfc1a75e2efe7d46469656e1449e6278539b17d25b9c8ea94339
SSDEEP 3072:Da34z4WZ53xM3qg55qYe1xHng0fOCUGzo3D:D3X+3ZqhxXO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA EnumSystemCodePagesA LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW CopyFileExW ReadConsoleOutputCharacterW SetVolumeLabelW FatalExit VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressW GetCommandLineA GetVolumeInformationW CancelTimerQueueTimer DeleteTimerQueueTimer GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation GetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives VerifyVersionInfoA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

gdi32

GetCharWidth32A

Sharing