file[.]exe | Triage™

General

Target
file.exe
Size 186KB
Sample221123-srbtjsfb2x
SHA256 040bee531281dd8fcfe6d8ced3d5378bac12faa67fa5f972693560c361dec0ed
MD5 190218cd1f147ff77bd6c1e667b496c4
SHA1 f53c0d0bc50447fc83fd79d342932870b18a5517
SHA512 d723d0f5d0dbb7c79d4276effe177e88024b28d4dbeaf4b8a76c2958f5d19b1a5496c4b8574b5f97bd42a38183e71db9656e95aaf5b0f7b60d587e3ab12358f4
SSDEEP 3072:Uuu8l+NkLRZ6cZW0bk5kBhmL3x55wAaXGMsxiu0nMMw:fuILnhZzj/mL3x55ZaXGxiu0n
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 186KB

file.exe

IMPHASH 4d35ec7e472b754768cb5d6503735c28
SHA256 040bee531281dd8fcfe6d8ced3d5378bac12faa67fa5f972693560c361dec0ed
MD5 190218cd1f147ff77bd6c1e667b496c4
SHA1 f53c0d0bc50447fc83fd79d342932870b18a5517
SHA512 d723d0f5d0dbb7c79d4276effe177e88024b28d4dbeaf4b8a76c2958f5d19b1a5496c4b8574b5f97bd42a38183e71db9656e95aaf5b0f7b60d587e3ab12358f4
SSDEEP 3072:Uuu8l+NkLRZ6cZW0bk5kBhmL3x55wAaXGMsxiu0nMMw:fuILnhZzj/mL3x55ZaXGxiu0n
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextFileA WriteConsoleInputW EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleA VirtualFree FindNextVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsA GetProcAddress GlobalAlloc MoveFileWithProgressA GetBinaryTypeA GetThreadSelectorEntry GetCommandLineW InterlockedDecrement WritePrivateProfileStringA VerifyVersionInfoW CancelTimerQueueTimer CopyFileW GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA InterlockedIncrement GetModuleHandleW GetACP GlobalWire GetTapeParameters HeapWalk EnumDateFormatsW InterlockedExchangeAdd GetConsoleTitleW InterlockedCompareExchange EnumCalendarInfoA InterlockedExchange GetEnvironmentStringsW SetCalendarInfoA TerminateThread MoveFileW AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomW GetTickCount GetVolumeInformationW EnumSystemCodePagesA FindFirstChangeNotificationW LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing