file[.]exe | Triage™

General

Target
file.exe
Size 317KB
Sample221124-t1cymsfc94
SHA256 9617d4eefc2c16ff7587d7a85c1f52d23053e02632e9cfc27e0a5eb84486f05c
MD5 d46c47543ab771c8d6bd2d7c9ba853a3
SHA1 b339decb0fd779a0a7c192d321aec1017808e28e
SHA512 e601d8b012d81409005b3b7aa002b2ce4417ae36f0a62f6dba4fdb592f6e730eafb02d1c5adbdc6db800206204b5b30577366e85f8faa3b719ef0dc574917d8f
SSDEEP 6144:3D8VwwJLvjFAFoqe6jv3gB5HFV7n6kSw8rZuge6Bhk4GuRfk:3D8V7XFAFa6jvQBlnxFnl6Tllk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 317KB

file.exe

IMPHASH 6c40b34072a066ed2f848eec02bfbd5f
SHA256 9617d4eefc2c16ff7587d7a85c1f52d23053e02632e9cfc27e0a5eb84486f05c
MD5 d46c47543ab771c8d6bd2d7c9ba853a3
SHA1 b339decb0fd779a0a7c192d321aec1017808e28e
SHA512 e601d8b012d81409005b3b7aa002b2ce4417ae36f0a62f6dba4fdb592f6e730eafb02d1c5adbdc6db800206204b5b30577366e85f8faa3b719ef0dc574917d8f
SSDEEP 6144:3D8VwwJLvjFAFoqe6jv3gB5HFV7n6kSw8rZuge6Bhk4GuRfk:3D8V7XFAFa6jvQBlnxFnl6Tllk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27974

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputA EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterA GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileW GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeW GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA FindNextFileA MoveFileWithProgressA TerminateThread GetCommandLineW FindFirstChangeNotificationA VerifyVersionInfoA DeleteTimerQueue FindFirstVolumeA GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleA EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CreateFileA GetVolumeInformationW EnumSystemCodePagesA LocalAlloc LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

user32

GetComboBoxInfo GetMessageExtraInfo GetListBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing