file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample221124-l6sbhsaf6x
SHA256 a0c4747fcf2a1de2b4c9d9367342fb495c34f6250400c68ee76b2f5c35991b01
MD5 489c542faa295d022be460c502aff210
SHA1 37f4591403e477e3a8ce9eec502aa6b3b35bd549
SHA512 d74062694d4d53120d149092d5f99b93533e6bbe8a6485f86b16e4e35785f083dbe29ddd2f45782b3c6f47b0c67f2ad11b651853c00000fcaa76739dbf38a508
SSDEEP 3072:fNOkXn/d3YoHDLeLSpUkhBoui05zxiQ2uEZUVJscBlJOCWFyAf:0kdFHeLSpU2Ouh2upJDCyAf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 42baf211745e07f0f4bc96da30d3b4e9
SHA256 a0c4747fcf2a1de2b4c9d9367342fb495c34f6250400c68ee76b2f5c35991b01
MD5 489c542faa295d022be460c502aff210
SHA1 37f4591403e477e3a8ce9eec502aa6b3b35bd549
SHA512 d74062694d4d53120d149092d5f99b93533e6bbe8a6485f86b16e4e35785f083dbe29ddd2f45782b3c6f47b0c67f2ad11b651853c00000fcaa76739dbf38a508
SSDEEP 3072:fNOkXn/d3YoHDLeLSpUkhBoui05zxiQ2uEZUVJscBlJOCWFyAf:0kdFHeLSpU2Ouh2upJDCyAf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27958

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA LocalAlloc FindNextFileA GetBinaryTypeA TerminateThread GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer FindFirstVolumeA GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters LoadLibraryA GlobalFindAtomA EnumSystemCodePagesA LoadLibraryW GetVolumeInformationW MoveFileWithProgressA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing