file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample221121-2v37msae28
SHA256 7740d216305cf1b4459c1e62fd97a57ff502ca5fc4b69cdeb5c41c80bc5211bf
MD5 b791c534dc6b9581e1340101407ea90b
SHA1 c5485a428cdf40160d80edb0523b240c2a2f35ae
SHA512 5304ff44ecb6f9abe09d086038bf7e9f1d4cc70e27e6a5d6336ae41376700b474187c862e6b1bc8dac3fb272801758d78fabeb9b187ddd0a567cc52f63dfd3b6
SSDEEP 3072:OVsdoiRDtXwaWtwnK5kLCUxxMyGbouoCbKXvEaMT:OVQf4w8aJmbKXvy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 14ab82cfc4197b12aed8f6b7f537cc40
SHA256 7740d216305cf1b4459c1e62fd97a57ff502ca5fc4b69cdeb5c41c80bc5211bf
MD5 b791c534dc6b9581e1340101407ea90b
SHA1 c5485a428cdf40160d80edb0523b240c2a2f35ae
SHA512 5304ff44ecb6f9abe09d086038bf7e9f1d4cc70e27e6a5d6336ae41376700b474187c862e6b1bc8dac3fb272801758d78fabeb9b187ddd0a567cc52f63dfd3b6
SSDEEP 3072:OVsdoiRDtXwaWtwnK5kLCUxxMyGbouoCbKXvEaMT:OVQf4w8aJmbKXvy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27927

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFlags FindNextFileA WriteConsoleInputW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalSize TlsGetValue CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetCurrentDirectoryA GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc MoveFileWithProgressA GetBinaryTypeA EnumSystemCodePagesW GetCommandLineW InterlockedExchange FindFirstChangeNotificationW CancelTimerQueueTimer GetConsoleTitleW CopyFileW CreateTimerQueueTimer FindResourceA FormatMessageA CreateJobObjectA GetConsoleFontSize FindFirstVolumeA InterlockedIncrement GetACP HeapSetInformation EnumDateFormatsW GetConsoleTitleA EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetEnvironmentStringsW GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileW AddAtomW FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA GetAtomNameW SetConsoleActiveScreenBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount CloseHandle GetThreadSelectorEntry LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

Sharing