file[.]exe | Triage™

General

Target
file.exe
Size 161KB
Sample221121-segt2aef66
SHA256 8c581202747daa219075922ba25c3f2027c951c7a10e69a0fec5e603d1a3dfa7
MD5 cea76de7e11f0c2a62547ec2711803f3
SHA1 4127c4d3569576be556a2bea80882a6bed97733e
SHA512 a93948ab5e8284cbfa1b8f6075debf87a3dcf5a3c80f1d808faee9005c19496cb20eae708279c0996d8b89a1ab9b7c16d83cdc524df11f714c9135fd4bb48117
SSDEEP 3072:OYhqx4Ko+Tcid5iJQ4U1FiWtkg6fa2vwv72246JSZ:O3XoYcLJQVknlvyq246JSZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 161KB

file.exe

IMPHASH 81606cf08132c187278eea6df6dda01a
SHA256 8c581202747daa219075922ba25c3f2027c951c7a10e69a0fec5e603d1a3dfa7
MD5 cea76de7e11f0c2a62547ec2711803f3
SHA1 4127c4d3569576be556a2bea80882a6bed97733e
SHA512 a93948ab5e8284cbfa1b8f6075debf87a3dcf5a3c80f1d808faee9005c19496cb20eae708279c0996d8b89a1ab9b7c16d83cdc524df11f714c9135fd4bb48117
SSDEEP 3072:OYhqx4Ko+Tcid5iJQ4U1FiWtkg6fa2vwv72246JSZ:O3XoYcLJQVknlvyq246JSZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24887

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW LocalFree FindNextFileA WriteConsoleInputW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalSize TlsGetValue CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressW GetBinaryTypeA GetThreadSelectorEntry GetCommandLineW FillConsoleOutputCharacterA FindFirstChangeNotificationW CancelTimerQueueTimer GetConsoleTitleW CopyFileA CreateTimerQueueTimer FindResourceA FormatMessageW CreateJobObjectA GetConsoleFontSize FindFirstVolumeW InterlockedIncrement GetModuleHandleA GetACP HeapSetInformation EnumDateFormatsW GetConsoleTitleA GetPrivateProfileStructW EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetEnvironmentStringsW GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileA FindAtomW FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA GetAtomNameW SetConsoleActiveScreenBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount InterlockedExchange LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageTime

gdi32

GetBoundsRect

Sharing