file[.]exe | Triage™

General

Target
file.exe
Size 149KB
Sample221126-xdhr6aac21
SHA256 90c230d2eeb7b5952e2a50055821bdeb0a1447a8b5dcea34686aecdf0146604f
MD5 8cef93f601c5db777f536e2706badbb2
SHA1 cc954334a694877aa192ad328073ec4d39cd11fc
SHA512 d16e4911ceddfc50e18016623d96c0b71b8217b412d62c44074b42df4a5c09cd69c64f57cc0592382770bc6012176f797a66e3908d379694896f7ada96bb8196
SSDEEP 1536:S8hJEiSMLi9SbApRAMdLpezDPG4lem5eHJYOLZ0chE1a4pLdwD8/NDj08xLUYNL9:BhJg59TcTom5ALZ0yEE4YD8lo8js2vK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 149KB

file.exe

IMPHASH 77b9cbeda5e32323ee560d94649c1c1a
SHA256 90c230d2eeb7b5952e2a50055821bdeb0a1447a8b5dcea34686aecdf0146604f
MD5 8cef93f601c5db777f536e2706badbb2
SHA1 cc954334a694877aa192ad328073ec4d39cd11fc
SHA512 d16e4911ceddfc50e18016623d96c0b71b8217b412d62c44074b42df4a5c09cd69c64f57cc0592382770bc6012176f797a66e3908d379694896f7ada96bb8196
SSDEEP 1536:S8hJEiSMLi9SbApRAMdLpezDPG4lem5eHJYOLZ0chE1a4pLdwD8/NDj08xLUYNL9:BhJg59TcTom5ALZ0yEE4YD8lo8js2vK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17271

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA EnumDateFormatsW OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings GetCommConfig QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleA GlobalHandle CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW GetVolumeInformationA VerifyVersionInfoA DeleteTimerQueue SearchPathW CopyFileW GetHandleInformation FindResourceA CreateJobObjectW FindFirstVolumeW GlobalFlags CreateNamedPipeW WritePrivateProfileStringW InterlockedDecrement GetModuleHandleW GetTickCount VerSetConditionMask WriteTapemark GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA TerminateProcess MoveFileA AddAtomW UnregisterWait FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect _hread ClearCommBreak GlobalFindAtomA CloseHandle FindFirstChangeNotificationA LoadLibraryW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetMenuInfo

gdi32

GetCharABCWidthsA

Sharing