file[.]exe | Triage™

General

Target
file.exe
Size 151KB
Sample221127-lfww1sbb4s
SHA256 4d2289412cb0a05bd746a6aac095cd11d2558f33a7eec0cffa367dff057d0f8b
MD5 fa57ba1bd3ca3c45dd5172f2538b3d84
SHA1 fa2c5bb17b6a4af2d8cd19377dc869aeb5d8af30
SHA512 34e94a5a2d304b4e3d7b5f0c07bafc890a4ae8cc8130f7915febe13c9b254adc9e3937abd8c57936e0fb99b2c0fea760c3624787ca3ae79184c8e46d3330aedf
SSDEEP 3072:UmDERfJy1lSbAwyE5Pp+FYSBD1rE001jFnH9js+p:pE7y1lSkwXUYSBS3jBHe+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 151KB

file.exe

IMPHASH ec7b3dbd80b40e9b023e18c70dc965d7
SHA256 4d2289412cb0a05bd746a6aac095cd11d2558f33a7eec0cffa367dff057d0f8b
MD5 fa57ba1bd3ca3c45dd5172f2538b3d84
SHA1 fa2c5bb17b6a4af2d8cd19377dc869aeb5d8af30
SHA512 34e94a5a2d304b4e3d7b5f0c07bafc890a4ae8cc8130f7915febe13c9b254adc9e3937abd8c57936e0fb99b2c0fea760c3624787ca3ae79184c8e46d3330aedf
SSDEEP 3072:UmDERfJy1lSbAwyE5Pp+FYSBD1rE001jFnH9js+p:pE7y1lSkwXUYSBS3jBHe+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20231

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsW OpenMutexW GetConsoleAliasExesLengthA CopyFileExW ReadConsoleOutputCharacterW GetEnvironmentStrings GetCommConfig QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileA SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalHandle CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateProcess WriteConsoleOutputA GetCommandLineW FindFirstChangeNotificationW EnumSystemCodePagesA CancelTimerQueueTimer SearchPathW CopyFileA GetHandleInformation FindResourceA GetModuleHandleW CreateJobObjectW FindFirstVolumeW GlobalFlags CreateNamedPipeW LocalUnlock InterlockedIncrement CloseHandle GetTickCount GetShortPathNameA DeviceIoControl HeapLock GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateA GenerateConsoleCtrlEvent MoveFileW AddAtomW WriteConsoleInputW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect _hread ClearCommBreak SetProcessPriorityBoost GlobalFindAtomA GetVolumeInformationA VerifyVersionInfoA LoadLibraryW ReadFile WriteConsoleW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

CharUpperBuffA GetComboBoxInfo GetMenuInfo

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpWriteData

Sharing