file[.]exe | Triage™

General

Target
file.exe
Size 186KB
Sample221124-vctrxsbd4v
SHA256 9251e4d0d3f92f96f9484dc240ad5aecd74cd4ebe709fa609c60e6973057e28d
MD5 746bacf7a1977e9cd4228989a0287862
SHA1 ef4785397069ec19c0f7e60771a51d1949b05ea6
SHA512 e36bf1ef8e5c5a5ca0c7d7b8c3d9a2ff0f08dfaa042e8ea9ea81fba8352d592095d9373e3189a7cfc2ca13b326ded7f98383fe93d8f2c86d87216324c1da6217
SSDEEP 3072:eAsKG2vHpIrSWqLGd/+YlGB5kOcFKgHmqVC/64VykD9nDBE71MnT55P:KKAzqLGd/+85FKc+JBE76nTD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 186KB

file.exe

IMPHASH 658ab59320afcd111dc99f6c4da07764
SHA256 9251e4d0d3f92f96f9484dc240ad5aecd74cd4ebe709fa609c60e6973057e28d
MD5 746bacf7a1977e9cd4228989a0287862
SHA1 ef4785397069ec19c0f7e60771a51d1949b05ea6
SHA512 e36bf1ef8e5c5a5ca0c7d7b8c3d9a2ff0f08dfaa042e8ea9ea81fba8352d592095d9373e3189a7cfc2ca13b326ded7f98383fe93d8f2c86d87216324c1da6217
SSDEEP 3072:eAsKG2vHpIrSWqLGd/+YlGB5kOcFKgHmqVC/64VykD9nDBE71MnT55P:KKAzqLGd/+85FKc+JBE76nTD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28294

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextFileA WriteConsoleInputA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost LocalSize AddConsoleAliasA CreateFileA GetMailslotInfo GetWindowsDirectoryW GetModuleHandleW VirtualFree FindNextVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA LocalAlloc MoveFileWithProgressA WritePrivateProfileStringA TerminateThread GetCommandLineW FindFirstChangeNotificationW VerifyVersionInfoA CancelTimerQueueTimer CopyFileW GetHandleInformation FindResourceA FormatMessageW CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleW EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetEnvironmentStringsW SetCalendarInfoA MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA DeleteFileA GetVolumeInformationW EnumSystemCodePagesA GetBinaryTypeA LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageExtraInfo GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing