file[.]exe | Triage™

General

Target
file.exe
Size 188KB
Sample221124-ze99xagh39
SHA256 c1c1fec72b0fbf32e5081601312a520abdacbbaceb8c2efc28c0cf39b326b62e
MD5 9ecd71ff15e975d5613e58065dd9386f
SHA1 c9262f18ebbd3666a37a8e9bd6cd9096fadff531
SHA512 11820a83be042f3dba64ee66fa153b93cf9525cf265ebb97cf576f5cb6a1313bc3e591d68855a63c60eb7ec05eb1b7659a4df0d7279a8c355da042fabe318487
SSDEEP 3072:LZZskeXV7PPshXePWLTBUZ1yq1ZdM5OJAphaf89NJ0DN/GvWM4s4On3:Lte14jLTBYT1JAmfkNJ0R/Al
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 188KB

file.exe

IMPHASH 2d129e25454562ff3cc878ef0dbc787a
SHA256 c1c1fec72b0fbf32e5081601312a520abdacbbaceb8c2efc28c0cf39b326b62e
MD5 9ecd71ff15e975d5613e58065dd9386f
SHA1 c9262f18ebbd3666a37a8e9bd6cd9096fadff531
SHA512 11820a83be042f3dba64ee66fa153b93cf9525cf265ebb97cf576f5cb6a1313bc3e591d68855a63c60eb7ec05eb1b7659a4df0d7279a8c355da042fabe318487
SSDEEP 3072:LZZskeXV7PPshXePWLTBUZ1yq1ZdM5OJAphaf89NJ0DN/GvWM4s4On3:Lte14jLTBYT1JAmfkNJ0R/Al
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterA GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileW GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeW GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc WriteConsoleInputA TerminateThread GetCommandLineW FindFirstChangeNotificationA VerifyVersionInfoA DeleteTimerQueue FindFirstVolumeW GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoA GetNamedPipeHandleStateW InterlockedDecrement SetCalendarInfoA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CreateFileA CloseHandle GetVolumeInformationA EnumSystemCodePagesA MoveFileWithProgressA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo GetMessageExtraInfo GetListBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing