file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample221124-l571ksfe99
SHA256 f8fe2eed9f53c1553ef94fffe69e36175ee887ebca95b41c02eb105c1d45d6c3
MD5 24670e819166152dcb5edaa7bd7b5568
SHA1 1c4e0900c724dee762b364c479ec89cb5cd102de
SHA512 6c82df8d1dc939c5c3cc36066d54cc60573016f8cbc170af4322db504085a4a90c894ca4f8df3d1f12db325ce2336b0331365202f92036e00c000c200f49dc6f
SSDEEP 3072:rNOkqRQd324eYtLakiGinur05Et7o93CbbNDHNk0flCKBEZ9aR8l:IkbLtLakJMu1S3YDCPKU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 42baf211745e07f0f4bc96da30d3b4e9
SHA256 f8fe2eed9f53c1553ef94fffe69e36175ee887ebca95b41c02eb105c1d45d6c3
MD5 24670e819166152dcb5edaa7bd7b5568
SHA1 1c4e0900c724dee762b364c479ec89cb5cd102de
SHA512 6c82df8d1dc939c5c3cc36066d54cc60573016f8cbc170af4322db504085a4a90c894ca4f8df3d1f12db325ce2336b0331365202f92036e00c000c200f49dc6f
SSDEEP 3072:rNOkqRQd324eYtLakiGinur05Et7o93CbbNDHNk0flCKBEZ9aR8l:IkbLtLakJMu1S3YDCPKU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27958

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA LocalAlloc FindNextFileA GetBinaryTypeA TerminateThread GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer FindFirstVolumeA GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters LoadLibraryA GlobalFindAtomA EnumSystemCodePagesA LoadLibraryW GetVolumeInformationW MoveFileWithProgressA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing