file[.]exe | Triage™

General

Target
file.exe
Size 163KB
Sample221121-g5gfeaba9x
SHA256 45420f0367b7cd22130b91e7231feb5b0e4eca6145e0fc2d2cfaac86f114e212
MD5 6f6e669f77a373d05ec5644268566178
SHA1 952538ecada78f9639878ff6f3e72f28e1746cdb
SHA512 5001ff95b7c2ac3c5c20527c21c2e1473478b5c12dbd5744c650586b853cf931cbd2d91d982d4db10aa4e3feeb7d75ab2cb2174a9062309d66325dc5a93e75a1
SSDEEP 3072:xbxMjbGNgjEm8NjLp5+Qvlef+/Pw8BjA8kJlwewX86f0rhu:xkbGNGONjm+Yf+/I8KpwsXF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 163KB

file.exe

IMPHASH e5376df72433167763670bb2214e64b1
SHA256 45420f0367b7cd22130b91e7231feb5b0e4eca6145e0fc2d2cfaac86f114e212
MD5 6f6e669f77a373d05ec5644268566178
SHA1 952538ecada78f9639878ff6f3e72f28e1746cdb
SHA512 5001ff95b7c2ac3c5c20527c21c2e1473478b5c12dbd5744c650586b853cf931cbd2d91d982d4db10aa4e3feeb7d75ab2cb2174a9062309d66325dc5a93e75a1
SSDEEP 3072:xbxMjbGNgjEm8NjLp5+Qvlef+/Pw8BjA8kJlwewX86f0rhu:xkbGNGONjm+Yf+/I8KpwsXF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalSize TlsGetValue CreateFileA SetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressW GetBinaryTypeA GetThreadSelectorEntry GetCommandLineW InterlockedExchange FillConsoleOutputCharacterA CancelTimerQueueTimer GetConsoleTitleW CopyFileA CreateTimerQueueTimer FindResourceA FormatMessageW CreateJobObjectA GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetModuleHandleA GetACP HeapSetInformation EnumCalendarInfoW GetConsoleTitleA GetPrivateProfileStructW EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileA FindAtomW GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetAtomNameW FlushConsoleInputBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount FindFirstChangeNotificationW LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageTime

gdi32

GetBoundsRect

Sharing