file[.]exe | Triage™

General

Target
file.exe
Size 185KB
Sample221124-nfenvadf4v
SHA256 6cf9a5fd2ed9185030a91ee23cbe6ae37c9dabe9841f4464e042cbedb4450490
MD5 119989aa9ec57783215a1494c6d41bbe
SHA1 8e41cfdf07c8bbc6c6cd2972e98641d995364b78
SHA512 ea4cdc13da176c7321f1635db6d44cd6572ea1125f090377e665740f60aafe09ce1677d4959f05ece10d57ceca8088cffa84172dab25a2d7222017c161e5fd6b
SSDEEP 3072:uNP/79O/TGFGXLLO8oRr9nNh53FxfJ8rahPMeCFV39uNwkoS4vFG2iL5q:a/gLhLLaRrZl7ara1M7FVtu2keFbiLA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 185KB

file.exe

IMPHASH 9e0c0a8bbd1c3c9c8f9256662a922565
SHA256 6cf9a5fd2ed9185030a91ee23cbe6ae37c9dabe9841f4464e042cbedb4450490
MD5 119989aa9ec57783215a1494c6d41bbe
SHA1 8e41cfdf07c8bbc6c6cd2972e98641d995364b78
SHA512 ea4cdc13da176c7321f1635db6d44cd6572ea1125f090377e665740f60aafe09ce1677d4959f05ece10d57ceca8088cffa84172dab25a2d7222017c161e5fd6b
SSDEEP 3072:uNP/79O/TGFGXLLO8oRr9nNh53FxfJ8rahPMeCFV39uNwkoS4vFG2iL5q:a/gLhLLaRrZl7ara1M7FVtu2keFbiLA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27942

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterA GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA FindNextFileA GetVolumeInformationW TerminateThread GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer FindFirstVolumeA GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters LoadLibraryA GlobalFindAtomA LocalAlloc EnumSystemCodePagesA LoadLibraryW MoveFileWithProgressA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing