file[.]exe | Triage™

General

Target
file.exe
Size 1011KB
Sample221121-ssf5nafc75
SHA256 1e178cb5d1ceea8f6a38b6ac8c8cf7f930419e89d9d2c161548643dcff600c96
MD5 b946a59e49685e9742360c327f0414b8
SHA1 a47435d9a426a21779ff0ae49ed5668f5eefa06c
SHA512 79758265e08e2a51c98b56f6f39219a13c0d53f9458b2777d70e666e8adc146faeed558ac3a07d0422eb969fc7db6551389ed9cfb4ca5582b34dee2597589856
SSDEEP 24576:9Sxg6KPwsNhmohBQq8urQ/Zz5ji41kq5vkmuh9TkrCfyP9:9S66KPwKdQp5jBOq5EThfyP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 1011KB

file.exe

IMPHASH 10f56575b1efdf32d6eac067f69dea42
SHA256 1e178cb5d1ceea8f6a38b6ac8c8cf7f930419e89d9d2c161548643dcff600c96
MD5 b946a59e49685e9742360c327f0414b8
SHA1 a47435d9a426a21779ff0ae49ed5668f5eefa06c
SHA512 79758265e08e2a51c98b56f6f39219a13c0d53f9458b2777d70e666e8adc146faeed558ac3a07d0422eb969fc7db6551389ed9cfb4ca5582b34dee2597589856
SSDEEP 24576:9Sxg6KPwsNhmohBQq8urQ/Zz5ji41kq5vkmuh9TkrCfyP9:9S66KPwKdQp5jBOq5EThfyP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28167

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW LocalFree FindNextFileA WriteConsoleInputW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalSize TlsGetValue CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc MoveFileWithProgressW GetBinaryTypeA GetThreadSelectorEntry GetCommandLineW FillConsoleOutputCharacterA FindFirstChangeNotificationW CancelTimerQueueTimer GetConsoleTitleW CopyFileA CreateTimerQueueTimer FindResourceA FormatMessageW CreateJobObjectA GetConsoleFontSize FindFirstVolumeW InterlockedIncrement GetModuleHandleA GetACP HeapSetInformation EnumDateFormatsW GetConsoleTitleA GetPrivateProfileStructW EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetEnvironmentStringsW GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileA FindAtomW FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA GetAtomNameW SetConsoleActiveScreenBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount InterlockedExchange LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageTime

gdi32

GetBoundsRect

Sharing