file[.]exe | Triage™

General

Target
file.exe
Size 245KB
Sample221124-hm325afc29
SHA256 a8cb9c7d459b3c080947a80214301a8295cc5c301c1a2fae37cea8d6257b3ee8
MD5 07b7132b32b0ebdb496fd262cbacc0d0
SHA1 ef193f2526ef63a3cd04aeb9016c96105559dd83
SHA512 1bca428d9e5e69a3be1f761b681ddf4cd553b3d85be827e772b4ec09aed66d21f640af0e58e682de4b415521de60e21825abc5dd989b23f96b6d436fa3d709e1
SSDEEP 3072:RK1SsI60eQOl8Q0CLKpmDpHG5EHpRNRhgXMFLiefnGQiaH021ppXzJClRo1p2fr3:E9d0CLKpmNbprRrpDJClRoCfY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 245KB

file.exe

IMPHASH fe8907e8dcfc5d81d196c0b00096e8a9
SHA256 a8cb9c7d459b3c080947a80214301a8295cc5c301c1a2fae37cea8d6257b3ee8
MD5 07b7132b32b0ebdb496fd262cbacc0d0
SHA1 ef193f2526ef63a3cd04aeb9016c96105559dd83
SHA512 1bca428d9e5e69a3be1f761b681ddf4cd553b3d85be827e772b4ec09aed66d21f640af0e58e682de4b415521de60e21825abc5dd989b23f96b6d436fa3d709e1
SSDEEP 3072:RK1SsI60eQOl8Q0CLKpmDpHG5EHpRNRhgXMFLiefnGQiaH021ppXzJClRo1p2fr3:E9d0CLKpmNbprRrpDJClRoCfY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28134

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA LocalAlloc MoveFileWithProgressA GetBinaryTypeA FindNextFileA GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer CopyFileW GetHandleInformation FindResourceA FormatMessageW CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters LoadLibraryA GlobalFindAtomA DeleteFileA GetVolumeInformationW EnumSystemCodePagesA TerminateThread LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing