file[.]exe | Triage™

General

Target
file.exe
Size 186KB
Sample221122-b5tsvaaa4y
SHA256 b64e8eabf80fa115d768b803a66a6d3b1548f9be895a2d4bbd1f85ce1e8f8b31
MD5 4d13f383911f8b5a2a932de5e2c7c875
SHA1 bc0644879928c2c0349553cf1a5e8150205ac8d9
SHA512 7c769a2ce65ad0988f0789e31de14d304ebd6ad78ec9cd8f0769df8c2a8183c6fd6c877dca374b087d44fd550f76dafcd21ea983c704868ff6384229faaae825
SSDEEP 3072:SlnQ+PdnyyWaJ9+g5EP8W2ENcxHOmMlJVbmGlqR/Z:S93nb7JmRcxumCVyGlI/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 186KB

file.exe

IMPHASH 5b7cf1305fbc3fab39b1980560b94650
SHA256 b64e8eabf80fa115d768b803a66a6d3b1548f9be895a2d4bbd1f85ce1e8f8b31
MD5 4d13f383911f8b5a2a932de5e2c7c875
SHA1 bc0644879928c2c0349553cf1a5e8150205ac8d9
SHA512 7c769a2ce65ad0988f0789e31de14d304ebd6ad78ec9cd8f0769df8c2a8183c6fd6c877dca374b087d44fd550f76dafcd21ea983c704868ff6384229faaae825
SSDEEP 3072:SlnQ+PdnyyWaJ9+g5EP8W2ENcxHOmMlJVbmGlqR/Z:S93nb7JmRcxumCVyGlI/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27783

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFlags FindNextFileA WriteConsoleInputW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW CopyFileExW ReadConsoleOutputCharacterA SetVolumeLabelA GetEnvironmentStrings VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalSize TlsGetValue CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA TransactNamedPipe SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetCurrentDirectoryA GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc MoveFileWithProgressA GetBinaryTypeA EnumSystemCodePagesW GetCommandLineW InterlockedDecrement FindFirstChangeNotificationW CancelTimerQueueTimer GetConsoleTitleW CopyFileW CreateTimerQueueTimer FindResourceA FormatMessageA CreateJobObjectA GetConsoleFontSize FindFirstVolumeA InterlockedIncrement GetACP HeapWalk EnumDateFormatsW InterlockedExchangeAdd GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthW InterlockedExchange GetEnvironmentStringsW GetVolumeNameForVolumeMountPointW SetCalendarInfoA TerminateThread MoveFileW AddAtomW FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA GetAtomNameW SetConsoleActiveScreenBuffer GetOEMCP GetProcessIoCounters GlobalFindAtomW GetTickCount GetThreadSelectorEntry LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

Sharing