file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample221124-chvx3aaf77
SHA256 3c41093c718e1d2d04968a8e8f9b5fcc0be644f4555a08c4a132bfb990af8721
MD5 ae3a53b38c0be496c488f896387e9234
SHA1 7ff127be85fbebfe7a7d16a849664076eb5f30c0
SHA512 9d76db4e3a851be6129adc418a05b8add5023b818c3524220a077cd981572c4f62578d0c090d4835f4f47c558e5f102dcb81ccb9ee48e6da158f45648cfbfd79
SSDEEP 3072:TAOXcU19xq40YLozPgTyk5BJn3wLc39UVUAADgKORcm6sZF5IO8q:HXAYLozPCd5AA39UlAsmoZ4OF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 439962f0abdf3e15a4d985738590e170
SHA256 3c41093c718e1d2d04968a8e8f9b5fcc0be644f4555a08c4a132bfb990af8721
MD5 ae3a53b38c0be496c488f896387e9234
SHA1 7ff127be85fbebfe7a7d16a849664076eb5f30c0
SHA512 9d76db4e3a851be6129adc418a05b8add5023b818c3524220a077cd981572c4f62578d0c090d4835f4f47c558e5f102dcb81ccb9ee48e6da158f45648cfbfd79
SSDEEP 3072:TAOXcU19xq40YLozPgTyk5BJn3wLc39UVUAADgKORcm6sZF5IO8q:HXAYLozPCd5AA39UlAsmoZ4OF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28262

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextFileA WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA LocalAlloc MoveFileWithProgressA WritePrivateProfileStringA TerminateThread GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer CopyFileW GetHandleInformation FindResourceA FormatMessageW CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetEnvironmentStringsW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA DeleteFileA GetVolumeInformationW EnumSystemCodePagesA GetBinaryTypeA LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing