file[.]exe | Triage™

General

Target
file.exe
Size 244KB
Sample221124-rxz8naea6x
SHA256 ceeecae418bcffeb82a30bedad31894a736edd11bf580f0a39571c423dd077a9
MD5 66d15ac653e2f9d9536aab65623232a4
SHA1 9693cbb1c56eb68cc7c4c66cf66f1a07ec099f05
SHA512 aea4dc7d5373d6ff2022b1f46f67b4cf19149d7158fe558af30a702a7a16871aa078042f5b442f1bb6ae3d9212cb3cb81d1728f8ccbff1ebf5a765399174e346
SSDEEP 3072:rs2ajXCXMyUcIYeLNQYwfbP5SkbrTt8iTCY/QaScgMF9tj6CqLIsZjTow5mG970V:TaeXKAeLaYGqIQdGOUslTooPggL0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 244KB

file.exe

IMPHASH 6c40b34072a066ed2f848eec02bfbd5f
SHA256 ceeecae418bcffeb82a30bedad31894a736edd11bf580f0a39571c423dd077a9
MD5 66d15ac653e2f9d9536aab65623232a4
SHA1 9693cbb1c56eb68cc7c4c66cf66f1a07ec099f05
SHA512 aea4dc7d5373d6ff2022b1f46f67b4cf19149d7158fe558af30a702a7a16871aa078042f5b442f1bb6ae3d9212cb3cb81d1728f8ccbff1ebf5a765399174e346
SSDEEP 3072:rs2ajXCXMyUcIYeLNQYwfbP5SkbrTt8iTCY/QaScgMF9tj6CqLIsZjTow5mG970V:TaeXKAeLaYGqIQdGOUslTooPggL0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27958

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterA GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileW GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeW GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA FindNextFileA MoveFileWithProgressA TerminateThread GetCommandLineW FindFirstChangeNotificationA VerifyVersionInfoA DeleteTimerQueue FindFirstVolumeA GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleA EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CreateFileA GetVolumeInformationW EnumSystemCodePagesA LocalAlloc LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

user32

GetComboBoxInfo GetMessageExtraInfo GetListBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing