file[.]exe | Triage™

General

Target
file.exe
Size 188KB
Sample221124-zep9qsbh4w
SHA256 2cb95b7d309f60e6f3c3db63d2a1347ce949271d5d0ca216e89e926de7026322
MD5 19af7d56a80b702a3fb08e185519c801
SHA1 332037a66fc3ed82af3a0c6f6b1e9710b26ec6ae
SHA512 feeb522bfe7ce4c734b621aa47b1713d3fb43be7a39d87320920c48ddacface5b548cac3dc08d1112c38b85b05f36f0e8ea10ca3555b9a77fab37b230e4f7889
SSDEEP 3072:ksYroi9CfWiWeoL5Ew6ZHM5kNUIfEhsejRfxS00Bi/8h3:grPDL5EpWhXjRpd0Es3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 188KB

file.exe

IMPHASH 2d129e25454562ff3cc878ef0dbc787a
SHA256 2cb95b7d309f60e6f3c3db63d2a1347ce949271d5d0ca216e89e926de7026322
MD5 19af7d56a80b702a3fb08e185519c801
SHA1 332037a66fc3ed82af3a0c6f6b1e9710b26ec6ae
SHA512 feeb522bfe7ce4c734b621aa47b1713d3fb43be7a39d87320920c48ddacface5b548cac3dc08d1112c38b85b05f36f0e8ea10ca3555b9a77fab37b230e4f7889
SSDEEP 3072:ksYroi9CfWiWeoL5Ew6ZHM5kNUIfEhsejRfxS00Bi/8h3:grPDL5EpWhXjRpd0Es3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28630

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterA GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileW GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeW GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc WriteConsoleInputA TerminateThread GetCommandLineW FindFirstChangeNotificationA VerifyVersionInfoA DeleteTimerQueue FindFirstVolumeW GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoA GetNamedPipeHandleStateW InterlockedDecrement SetCalendarInfoA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CreateFileA CloseHandle GetVolumeInformationA EnumSystemCodePagesA MoveFileWithProgressA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo GetMessageExtraInfo GetListBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing