file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample221124-lqgvvahf3v
SHA256 1d62862ac8cf172f55d9f4a6ef82f4e92b6c5cb34282e33a1597165ab5ec134e
MD5 65843d57894686cf46b83872be7d72d5
SHA1 e7042ec0df6f70b79863497958ecb47399347e2e
SHA512 ba8de87aa1b084a83a49cfae7a64aba5bc07bf2a0875380faea4aae80e85281a850a3463a79551c19f0e87ec8d291cdb8d45dd36bcaeba81e8aeb85a79164e38
SSDEEP 3072:pyrihbQZf2YLL9hGZ3+2d+5s1P0Smxp+Exxick1zNQ5:CiOLL9AJdV1Pjmxpt3iZK5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 6d9a363d62a07a09fa9705e68797de5d
SHA256 1d62862ac8cf172f55d9f4a6ef82f4e92b6c5cb34282e33a1597165ab5ec134e
MD5 65843d57894686cf46b83872be7d72d5
SHA1 e7042ec0df6f70b79863497958ecb47399347e2e
SHA512 ba8de87aa1b084a83a49cfae7a64aba5bc07bf2a0875380faea4aae80e85281a850a3463a79551c19f0e87ec8d291cdb8d45dd36bcaeba81e8aeb85a79164e38
SSDEEP 3072:pyrihbQZf2YLL9hGZ3+2d+5s1P0Smxp+Exxick1zNQ5:CiOLL9AJdV1Pjmxpt3iZK5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA LocalAlloc MoveFileWithProgressA GetBinaryTypeA FindNextFileA GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer CopyFileW GetHandleInformation FindResourceA FormatMessageW CreateJobObjectW GetConsoleFontSize FindFirstVolumeA GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters LoadLibraryA GlobalFindAtomA DeleteFileA GetVolumeInformationW EnumSystemCodePagesA TerminateThread LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing