file[.]exe | Triage™

General

Target
file.exe
Size 189KB
Sample221121-xlcacagd21
SHA256 e4a3d5c424ff9572df88d66961157b285196df4a2bc12a1a091d93d4f5d1bf48
MD5 bdd76137cbdcc21c6637f007344dc50b
SHA1 2959a4ab3450efff4ecd44bbdfd980839a0da3f8
SHA512 95946701c2535c999baa51a7b6dda8a903c56fafdcb686449dcbfcbc40324bb074d8f7718050870e86e761c530a59382968caeb788279dcea4ef26423b42f1f0
SSDEEP 3072:KQ5yPeB1qUWheah5PB29jQKcSFl1jVhm40A9xUpHAcAB:KQsC+eWB2lQg1eCPU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 189KB

file.exe

IMPHASH 93ae14df8ab0ade79d7b336a0115d5db
SHA256 e4a3d5c424ff9572df88d66961157b285196df4a2bc12a1a091d93d4f5d1bf48
MD5 bdd76137cbdcc21c6637f007344dc50b
SHA1 2959a4ab3450efff4ecd44bbdfd980839a0da3f8
SHA512 95946701c2535c999baa51a7b6dda8a903c56fafdcb686449dcbfcbc40324bb074d8f7718050870e86e761c530a59382968caeb788279dcea4ef26423b42f1f0
SSDEEP 3072:KQ5yPeB1qUWheah5PB29jQKcSFl1jVhm40A9xUpHAcAB:KQsC+eWB2lQg1eCPU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28103

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW LocalFlags FindNextFileA WriteConsoleInputW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalSize TlsGetValue CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GlobalAlloc MoveFileWithProgressW GetBinaryTypeA GetThreadSelectorEntry GetCommandLineW FillConsoleOutputCharacterA FindFirstChangeNotificationW CancelTimerQueueTimer GetConsoleTitleW CopyFileA CreateTimerQueueTimer FindResourceA FormatMessageW CreateJobObjectA GetConsoleFontSize FindFirstVolumeW InterlockedIncrement GetACP HeapSetInformation EnumDateFormatsW GetConsoleTitleA GetPrivateProfileStructW EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchangeAdd InterlockedDecrement GetEnvironmentStringsW GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileW FindAtomW FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA GetAtomNameW SetConsoleActiveScreenBuffer GetOEMCP GetProcessIoCounters CreateDirectoryExA GlobalFindAtomW GetTickCount CloseHandle InterlockedExchange LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

Sharing