file[.]exe | Triage™

General

Target
file.exe
Size 162KB
Sample221121-see1faef64
SHA256 4d1495b4b4a339d413ce60a0d3d5653c97e2ae9b13018690d09b391ddcb462f7
MD5 eae99d7acff5b2108fd9c76f89f58342
SHA1 70defd9137db6e5385d378a0a784a8eb7d1fe924
SHA512 37ae09be18d332ffddce724bdfeb2c8f0fc2ee301d5ae714d7363975a3aacd6a3aa768c613df18643131b55ea46f8ca0f3edf2e2bc9c4696d1ceca48c9c5916e
SSDEEP 3072:3ucz0+hWhwSKd54r6x4pFK7pR46wWtRrlgceB:3t0TqSnlFklvXlVm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 162KB

file.exe

IMPHASH 81606cf08132c187278eea6df6dda01a
SHA256 4d1495b4b4a339d413ce60a0d3d5653c97e2ae9b13018690d09b391ddcb462f7
MD5 eae99d7acff5b2108fd9c76f89f58342
SHA1 70defd9137db6e5385d378a0a784a8eb7d1fe924
SHA512 37ae09be18d332ffddce724bdfeb2c8f0fc2ee301d5ae714d7363975a3aacd6a3aa768c613df18643131b55ea46f8ca0f3edf2e2bc9c4696d1ceca48c9c5916e
SSDEEP 3072:3ucz0+hWhwSKd54r6x4pFK7pR46wWtRrlgceB:3t0TqSnlFklvXlVm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24887

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW LocalFree FindNextFileA WriteConsoleInputW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalSize TlsGetValue CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressW GetBinaryTypeA GetThreadSelectorEntry GetCommandLineW FillConsoleOutputCharacterA FindFirstChangeNotificationW CancelTimerQueueTimer GetConsoleTitleW CopyFileA CreateTimerQueueTimer FindResourceA FormatMessageW CreateJobObjectA GetConsoleFontSize FindFirstVolumeW InterlockedIncrement GetModuleHandleA GetACP HeapSetInformation EnumDateFormatsW GetConsoleTitleA GetPrivateProfileStructW EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetEnvironmentStringsW GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileA FindAtomW FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA GetAtomNameW SetConsoleActiveScreenBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount InterlockedExchange LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageTime

gdi32

GetBoundsRect

Sharing