file[.]exe | Triage™

General

Target
file.exe
Size 147KB
Sample221126-a2cjqaab32
SHA256 7115a52e2454e73426dd2450a268bd578ec69743d2cb23d19cd60f91962d2b0e
MD5 66d9f05c2018e027411348864f57cd55
SHA1 a103e8be1500948eab7f79f32ebe5a20b6ec4399
SHA512 8c87e0d616b07e8a3bdfcf6a13eea89803c27dd3aa2985692a4777e3e4b265e9439f0bb1716c70a777ab8893bbea4d1d676afb04aae2fed923c1dd45a804aba1
SSDEEP 3072:ETfENfEQHx8D5kzudXhsJ+JNnyRJZgZ2Z:7fEQHKcJ+TyrKG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 147KB

file.exe

IMPHASH c9bb2d511f51a277e3f231434cb87b3a
SHA256 7115a52e2454e73426dd2450a268bd578ec69743d2cb23d19cd60f91962d2b0e
MD5 66d9f05c2018e027411348864f57cd55
SHA1 a103e8be1500948eab7f79f32ebe5a20b6ec4399
SHA512 8c87e0d616b07e8a3bdfcf6a13eea89803c27dd3aa2985692a4777e3e4b265e9439f0bb1716c70a777ab8893bbea4d1d676afb04aae2fed923c1dd45a804aba1
SSDEEP 3072:ETfENfEQHx8D5kzudXhsJ+JNnyRJZgZ2Z:7fEQHKcJ+TyrKG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15223

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings MapUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue CopyFileW GetHandleInformation FindResourceA FormatMessageW FindFirstVolumeW GlobalFlags WritePrivateProfileStringW InterlockedDecrement GetTickCount GetACP GlobalWire GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA GetModuleHandleA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA VirtualProtect SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CloseHandle GetVolumeInformationA EnumSystemCodePagesA FindFirstChangeNotificationA LoadLibraryW HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetListBoxInfo

gdi32

GetCharABCWidthsA

advapi32

AbortSystemShutdownW

Sharing