file[.]exe | Triage™

General

Target
file.exe
Size 151KB
Sample221127-kybhcsdh83
SHA256 538b0798d6e856ea04813859774522192ca5d7dbf4578c04827ceae8d8974b76
MD5 8e9ca06ac86d109a700e6adef1b7ffa2
SHA1 b58335852fab6d1d387eaabae0681aa00c4fdd45
SHA512 b9bcf420662a69ca1e46330b458fcefb1e47f1be8455373655bb8afdbb28b8d68a1b25c7e926afe6bdf66da62fe609ad101c2bfd017ce072bae3cb14f2481314
SSDEEP 3072:esLrE9KrVdE5FN4LL8Oc3k2F6LaGFgDkwy4VP:BiOVYqLG3SLKDnr5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 151KB

file.exe

IMPHASH ec7b3dbd80b40e9b023e18c70dc965d7
SHA256 538b0798d6e856ea04813859774522192ca5d7dbf4578c04827ceae8d8974b76
MD5 8e9ca06ac86d109a700e6adef1b7ffa2
SHA1 b58335852fab6d1d387eaabae0681aa00c4fdd45
SHA512 b9bcf420662a69ca1e46330b458fcefb1e47f1be8455373655bb8afdbb28b8d68a1b25c7e926afe6bdf66da62fe609ad101c2bfd017ce072bae3cb14f2481314
SSDEEP 3072:esLrE9KrVdE5FN4LL8Oc3k2F6LaGFgDkwy4VP:BiOVYqLG3SLKDnr5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20231

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsW OpenMutexW GetConsoleAliasExesLengthA CopyFileExW ReadConsoleOutputCharacterW GetEnvironmentStrings GetCommConfig QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileA SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalHandle CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateProcess WriteConsoleOutputA GetCommandLineW FindFirstChangeNotificationW EnumSystemCodePagesA CancelTimerQueueTimer SearchPathW CopyFileA GetHandleInformation FindResourceA GetModuleHandleW CreateJobObjectW FindFirstVolumeW GlobalFlags CreateNamedPipeW LocalUnlock InterlockedIncrement CloseHandle GetTickCount GetShortPathNameA DeviceIoControl HeapLock GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateA GenerateConsoleCtrlEvent MoveFileW AddAtomW WriteConsoleInputW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect _hread ClearCommBreak SetProcessPriorityBoost GlobalFindAtomA GetVolumeInformationA VerifyVersionInfoA LoadLibraryW ReadFile WriteConsoleW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

CharUpperBuffA GetComboBoxInfo GetMenuInfo

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpWriteData

Sharing