file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample221124-chvmasea2w
SHA256 a6fda7788aa33a6e5ea70ff2b43be8320dcc761243a0548db73ba92e5e172302
MD5 55aee6c891b4766adcf592b97f499ca1
SHA1 526b62081bfcd8e6d4b4910aca11d1477cbdeec7
SHA512 555a8bf0fb17015bbe7c6088bfa28f0f4b2038a901b9301ac1bf8e0ecbe2754a56cfd652eda737fbeee590bfe9fb99b1ab6f9f99d86c0aa5193152fb623bc112
SSDEEP 3072:5AOXr7FxS6T2LE6gKSPk58AeKCKKK/rH/1UdOitRpq3badn98ODFG:5XL2LE6gpGKKZUUgfd9tDs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 439962f0abdf3e15a4d985738590e170
SHA256 a6fda7788aa33a6e5ea70ff2b43be8320dcc761243a0548db73ba92e5e172302
MD5 55aee6c891b4766adcf592b97f499ca1
SHA1 526b62081bfcd8e6d4b4910aca11d1477cbdeec7
SHA512 555a8bf0fb17015bbe7c6088bfa28f0f4b2038a901b9301ac1bf8e0ecbe2754a56cfd652eda737fbeee590bfe9fb99b1ab6f9f99d86c0aa5193152fb623bc112
SSDEEP 3072:5AOXr7FxS6T2LE6gKSPk58AeKCKKK/rH/1UdOitRpq3badn98ODFG:5XL2LE6gpGKKZUUgfd9tDs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28262

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextFileA WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA LocalAlloc MoveFileWithProgressA WritePrivateProfileStringA TerminateThread GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer CopyFileW GetHandleInformation FindResourceA FormatMessageW CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetEnvironmentStringsW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA DeleteFileA GetVolumeInformationW EnumSystemCodePagesA GetBinaryTypeA LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing