file[.]exe | Triage™

General

Target
file.exe
Size 163KB
Sample221121-kcemwsbc92
SHA256 06bb20be73c0b4886a36abf6d8d324e3f2a21346966fdcb13e83a3fd2eb85c44
MD5 2ef683c9613f094cf7a1ee896b314dc9
SHA1 1467f4c9af4fe2ba2e95a16871ca1409877dac89
SHA512 a48537d0794111ef094cc38d3371ca89372dd193866c526519b4735ad421e61347a4679828f11163c64bf1082ae9984f033cd859f5a2a1ad2133aeeb08757409
SSDEEP 3072:LajVnxkLNGNBKOp5D+Z/XkQCmLQbKE4+3Zk1vp/:+/k4Bv4jCmzE4aZkt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 163KB

file.exe

IMPHASH e5376df72433167763670bb2214e64b1
SHA256 06bb20be73c0b4886a36abf6d8d324e3f2a21346966fdcb13e83a3fd2eb85c44
MD5 2ef683c9613f094cf7a1ee896b314dc9
SHA1 1467f4c9af4fe2ba2e95a16871ca1409877dac89
SHA512 a48537d0794111ef094cc38d3371ca89372dd193866c526519b4735ad421e61347a4679828f11163c64bf1082ae9984f033cd859f5a2a1ad2133aeeb08757409
SSDEEP 3072:LajVnxkLNGNBKOp5D+Z/XkQCmLQbKE4+3Zk1vp/:+/k4Bv4jCmzE4aZkt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24807

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExW RequestWakeupLatency LocalSize TlsGetValue CreateFileA SetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressW GetBinaryTypeA GetThreadSelectorEntry GetCommandLineW InterlockedExchange FillConsoleOutputCharacterA CancelTimerQueueTimer GetConsoleTitleW CopyFileA CreateTimerQueueTimer FindResourceA FormatMessageW CreateJobObjectA GetConsoleFontSize FindNextVolumeW InterlockedIncrement GetModuleHandleA GetACP HeapSetInformation EnumCalendarInfoW GetConsoleTitleA GetPrivateProfileStructW EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileA FindAtomW GetMailslotInfo FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA GetAtomNameW FlushConsoleInputBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount FindFirstChangeNotificationW LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageTime

gdi32

GetBoundsRect

Sharing