file[.]exe | Triage™

General

Target
file.exe
Size 245KB
Sample221124-pl66qagd4x
SHA256 db2adfc96ef96da277dfa9240b9ae8513ba4cfc4339ccb38082ff790e55bbc2f
MD5 908248fa7207996116a821c856394144
SHA1 b9fa0d1b747b226293f045f3b37310122ae82659
SHA512 58595b81bae36cbb180ae3cb4dafd759403db7b0f52f585afe656b52b497a42bfd94b2938d904ac32648978b7f495bce36dad8c3a1d00dc521c0c1beea78ad74
SSDEEP 6144:2bDL+KgLX2CH0bzZVv6zRvuf/ci0HaknsOZ/:2bDLY6CHuzZtURQuHaks+/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 245KB

file.exe

IMPHASH 9e0c0a8bbd1c3c9c8f9256662a922565
SHA256 db2adfc96ef96da277dfa9240b9ae8513ba4cfc4339ccb38082ff790e55bbc2f
MD5 908248fa7207996116a821c856394144
SHA1 b9fa0d1b747b226293f045f3b37310122ae82659
SHA512 58595b81bae36cbb180ae3cb4dafd759403db7b0f52f585afe656b52b497a42bfd94b2938d904ac32648978b7f495bce36dad8c3a1d00dc521c0c1beea78ad74
SSDEEP 6144:2bDL+KgLX2CH0bzZVv6zRvuf/ci0HaknsOZ/:2bDLY6CHuzZtURQuHaks+/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27926

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterA GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA FindNextFileA GetVolumeInformationW TerminateThread GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer FindFirstVolumeA GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters LoadLibraryA GlobalFindAtomA LocalAlloc EnumSystemCodePagesA LoadLibraryW MoveFileWithProgressA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing