file[.]exe | Triage™

General

Target
file.exe
Size 205KB
Sample221126-hd2spshf68
SHA256 0a695099d8c1fb5cbd3802b26ab9d89865e8dd08dc13bff44a7204edecd6597d
MD5 75c1737c00a25686887a7e276ca03a2f
SHA1 53ee45c5da113d2d932d57b783ad170746cd8dd0
SHA512 89b9189e5f195864d3392542ff76370459b50debcc031020d5072d66ded2448dd47303dd817a6d7f085c27fbedf8cb69b2a5c0b46e4b33d872accf4ee7cc774e
SSDEEP 6144:oZl7IPcfgNIxAiIsLTP7VsU1Hs5cdgP+:oZl24SsLj7VsU1YX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 205KB

file.exe

IMPHASH cac5a64898b0212b3f734c238c40eabf
SHA256 0a695099d8c1fb5cbd3802b26ab9d89865e8dd08dc13bff44a7204edecd6597d
MD5 75c1737c00a25686887a7e276ca03a2f
SHA1 53ee45c5da113d2d932d57b783ad170746cd8dd0
SHA512 89b9189e5f195864d3392542ff76370459b50debcc031020d5072d66ded2448dd47303dd817a6d7f085c27fbedf8cb69b2a5c0b46e4b33d872accf4ee7cc774e
SSDEEP 6144:oZl7IPcfgNIxAiIsLTP7VsU1Hs5cdgP+:oZl24SsLj7VsU1YX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15095

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings MapUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue CopyFileW GetHandleInformation FindResourceA CreateJobObjectW FindFirstVolumeW GlobalFlags WritePrivateProfileStringW InterlockedDecrement GetTickCount GetACP GlobalWire GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA GetModuleHandleA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA VirtualProtect SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CloseHandle GetVolumeInformationA EnumSystemCodePagesA FindFirstChangeNotificationA LoadLibraryW HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetListBoxInfo

gdi32

GetCharABCWidthsA

advapi32

AbortSystemShutdownW

Sharing