file[.]exe | Triage™

General

Target
file.exe
Size 220KB
Sample221121-mm9bcsfa53
SHA256 17fe9d78d7d4d00aeddea3eb49ab41a7c37ba714ed0044a6babb1aaa7f4249df
MD5 cc5d9d6791fe013be4ba2a1962661b70
SHA1 53b9afcaa43c5feb7bdfc52a0b909dba7457e1c3
SHA512 8ae8f0c60f0ff9ad9e196b1b78632dfbe1757ee31c92de1b46a032ebadc0309d17c28b8f6366838ca93f45318f94abd8f39ffcfa017e9305632c64bdaa6b0b38
SSDEEP 3072:oJmIkOs4DIUjHg8H5rlBkbMpVF8RBygLbKZwdTOeV1JbgZNq3XZLV0Z4OQDbJHF:osO0+HgsP/8/LLOZwceVDbr5VjFh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 220KB

file.exe

IMPHASH df93d21c471ccff0ce55a97430489352
SHA256 17fe9d78d7d4d00aeddea3eb49ab41a7c37ba714ed0044a6babb1aaa7f4249df
MD5 cc5d9d6791fe013be4ba2a1962661b70
SHA1 53b9afcaa43c5feb7bdfc52a0b909dba7457e1c3
SHA512 8ae8f0c60f0ff9ad9e196b1b78632dfbe1757ee31c92de1b46a032ebadc0309d17c28b8f6366838ca93f45318f94abd8f39ffcfa017e9305632c64bdaa6b0b38
SSDEEP 3072:oJmIkOs4DIUjHg8H5rlBkbMpVF8RBygLbKZwdTOeV1JbgZNq3XZLV0Z4OQDbJHF:osO0+HgsP/8/LLOZwceVDbr5VjFh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW LocalFree FindNextFileW WriteConsoleInputW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalSize TlsGetValue CreateFileA SetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressW GetBinaryTypeA GetThreadSelectorEntry GetCommandLineW InterlockedExchange FillConsoleOutputCharacterA CancelTimerQueueTimer GetConsoleTitleW CopyFileA CreateTimerQueueTimer FindResourceA FormatMessageW CreateJobObjectA GetConsoleFontSize FindFirstVolumeW InterlockedIncrement GetModuleHandleA GetACP HeapSetInformation EnumCalendarInfoW GetConsoleTitleA GetPrivateProfileStructW EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileA FindAtomW GetMailslotInfo FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointA GetAtomNameW FlushConsoleInputBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount FindFirstChangeNotificationW LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageTime

gdi32

GetBoundsRect

Sharing