file[.]exe | Triage™

General

Target
file.exe
Size 148KB
Sample221126-v4as5abf93
SHA256 c1e715fb0909c534c4ff13489946bdde4921e7a9bb1c7bc4f8b970ee1fbb0240
MD5 351c599f6bd24495c7b2552994dd5e05
SHA1 fe9a30760b106eb1fbc04243dc74e8160a450145
SHA512 bead26354914919147501b7b1427dd09e1ce322f950df6411640f9873ef9e40680af8d9f09a6360af1f886dfdb67a48bbd2281684aca4a27f16e8ca5fbbae658
SSDEEP 3072:OlMgyB5eSV8m5IKusJhSLGdXG2KpxbL0dDl:tgqNVtfJhLBUNY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 148KB

file.exe

IMPHASH 77b9cbeda5e32323ee560d94649c1c1a
SHA256 c1e715fb0909c534c4ff13489946bdde4921e7a9bb1c7bc4f8b970ee1fbb0240
MD5 351c599f6bd24495c7b2552994dd5e05
SHA1 fe9a30760b106eb1fbc04243dc74e8160a450145
SHA512 bead26354914919147501b7b1427dd09e1ce322f950df6411640f9873ef9e40680af8d9f09a6360af1f886dfdb67a48bbd2281684aca4a27f16e8ca5fbbae658
SSDEEP 3072:OlMgyB5eSV8m5IKusJhSLGdXG2KpxbL0dDl:tgqNVtfJhLBUNY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17271

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA EnumDateFormatsW OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings GetCommConfig QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleA GlobalHandle CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW GetVolumeInformationA VerifyVersionInfoA DeleteTimerQueue SearchPathW CopyFileW GetHandleInformation FindResourceA CreateJobObjectW FindFirstVolumeW GlobalFlags CreateNamedPipeW WritePrivateProfileStringW InterlockedDecrement GetModuleHandleW GetTickCount VerSetConditionMask WriteTapemark GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA TerminateProcess MoveFileA AddAtomW UnregisterWait FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect _hread ClearCommBreak GlobalFindAtomA CloseHandle FindFirstChangeNotificationA LoadLibraryW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetMenuInfo

gdi32

GetCharABCWidthsA

Sharing