file[.]exe | Triage™

General

Target
file.exe
Size 163KB
Sample221118-cedvdagc87
SHA256 ec703689a1647c026b1acf19fe4c3c3b8ec9b43f10cd4a2ea20ed72573e2db39
MD5 d60bf2b381fb0f1c31dcb7ad540fc8c6
SHA1 8c5972918b1959596f70681dd9eafd0b56fb5ddb
SHA512 c0f1f0c476b3f1da13589ec87ad3dfef6da323de78714a7f01c510ff028ef32e365fc0c55340082d2bb6a87c98d535e97bb2c1b4739645d3e43a339a83fa3b5a
SSDEEP 3072:/cIn3GclqKMi8565D8WBqTLSKITsMyE4eWNx+eT15:/N3GSFMUBBqvFIThyE4eKQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 163KB

file.exe

IMPHASH 208d42a9b248c38bd314a7688d20d4a3
SHA256 ec703689a1647c026b1acf19fe4c3c3b8ec9b43f10cd4a2ea20ed72573e2db39
MD5 d60bf2b381fb0f1c31dcb7ad540fc8c6
SHA1 8c5972918b1959596f70681dd9eafd0b56fb5ddb
SHA512 c0f1f0c476b3f1da13589ec87ad3dfef6da323de78714a7f01c510ff028ef32e365fc0c55340082d2bb6a87c98d535e97bb2c1b4739645d3e43a339a83fa3b5a
SSDEEP 3072:/cIn3GclqKMi8565D8WBqTLSKITsMyE4eWNx+eT15:/N3GSFMUBBqvFIThyE4eKQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25063

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA EnumSystemCodePagesA LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW CopyFileExW ReadConsoleOutputCharacterW SetVolumeLabelA FatalExit VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalSize TlsGetValue CreateFileA SetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerA TransactNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressW GetVolumeInformationW CancelTimerQueueTimer CreateTimerQueueTimer GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetModuleHandleA GetACP HeapSetInformation EnumCalendarInfoW GetConsoleTitleA GetPrivateProfileStructW EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetEnvironmentStrings SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileA FindAtomW GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetAtomNameW FlushConsoleInputBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount GetCommandLineA LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageTime

gdi32

GetCharWidth32A

Sharing