file[.]exe | Triage™

General

Target
file.exe
Size 206KB
Sample221126-pl66qaff8t
SHA256 8a75eb40f565ba16ea141ad0473315253ac17c6368ce59506ff6532f219181d1
MD5 fa88feb7e83019914c5bc21121a3dca5
SHA1 d28d4f68b6d7d91063cae67f5cb950e0bf2bb085
SHA512 d2925f553cd10be8e185d53fb7490467594d5552fc3ed3ad2eaf5fa9069dd95b3d2de34ce17dbc541c545a0d0aca694c1b31b9a3ac60ab60bc27f838504d7191
SSDEEP 3072:FQ2RgCKWIEFKWv5gv7kNIxzGTPBCasbPOP/9BD2sbgnjd5:nWCKWIEgD7kNItjaszOH9M7j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 206KB

file.exe

IMPHASH d690854357ff9f8e756c63fcf6626fd1
SHA256 8a75eb40f565ba16ea141ad0473315253ac17c6368ce59506ff6532f219181d1
MD5 fa88feb7e83019914c5bc21121a3dca5
SHA1 d28d4f68b6d7d91063cae67f5cb950e0bf2bb085
SHA512 d2925f553cd10be8e185d53fb7490467594d5552fc3ed3ad2eaf5fa9069dd95b3d2de34ce17dbc541c545a0d0aca694c1b31b9a3ac60ab60bc27f838504d7191
SSDEEP 3072:FQ2RgCKWIEFKWv5gv7kNIxzGTPBCasbPOP/9BD2sbgnjd5:nWCKWIEgD7kNItjaszOH9M7j
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15447

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings MapUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue CopyFileW GetHandleInformation FindResourceA CreateJobObjectW FindFirstVolumeW GlobalFlags WritePrivateProfileStringW InterlockedDecrement GetModuleHandleW GetTickCount GetACP GlobalWire GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CloseHandle GetVolumeInformationA EnumSystemCodePagesA FindFirstChangeNotificationA LoadLibraryW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetMenuInfo

gdi32

GetCharABCWidthsA

advapi32

AbortSystemShutdownW

Sharing