file[.]exe | Triage™

General

Target
file.exe
Size 206KB
Sample221126-e5c2wafc9y
SHA256 366d6ea002ddc1118ee1bd2c1f0c797bd8a4699517d30867d55d6a29e3ca7d25
MD5 045fc7cb52b489876d63d5201aa60e61
SHA1 3b40dac25d7febf1e37d0275090721b3cd267b03
SHA512 ad336e4c23d25bf1bab8b8e7b59fcfac80bcc6f171406a5a66d27372f2ad473101612917e336529dda3f8d06207225feef459ce7838e7f81ad0404f91dd294ac
SSDEEP 3072:tIkv8ox5xbr90nXd65Xu+3Gc/lkTQV7yco5PjFhg9d3Z0k3y3f1aOC36C1Djq:tJ35xbr9eo3GcdOQgX5RhgX3i3bCK2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 206KB

file.exe

IMPHASH cac5a64898b0212b3f734c238c40eabf
SHA256 366d6ea002ddc1118ee1bd2c1f0c797bd8a4699517d30867d55d6a29e3ca7d25
MD5 045fc7cb52b489876d63d5201aa60e61
SHA1 3b40dac25d7febf1e37d0275090721b3cd267b03
SHA512 ad336e4c23d25bf1bab8b8e7b59fcfac80bcc6f171406a5a66d27372f2ad473101612917e336529dda3f8d06207225feef459ce7838e7f81ad0404f91dd294ac
SSDEEP 3072:tIkv8ox5xbr90nXd65Xu+3Gc/lkTQV7yco5PjFhg9d3Z0k3y3f1aOC36C1Djq:tJ35xbr9eo3GcdOQgX5RhgX3i3bCK2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15239

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings MapUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue CopyFileW GetHandleInformation FindResourceA CreateJobObjectW FindFirstVolumeW GlobalFlags WritePrivateProfileStringW InterlockedDecrement GetTickCount GetACP GlobalWire GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA GetModuleHandleA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA VirtualProtect SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CloseHandle GetVolumeInformationA EnumSystemCodePagesA FindFirstChangeNotificationA LoadLibraryW HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetListBoxInfo

gdi32

GetCharABCWidthsA

advapi32

AbortSystemShutdownW

Sharing