file[.]exe | Triage™

General

Target
file.exe
Size 209KB
Sample221127-lg2hwsfd96
SHA256 1ba08967b94a3066d9de6040a7ee7f2db2c80e07977d30ff1d8ba24fedfdf6f1
MD5 0f2c056a986063669f8d7b6dce9f392c
SHA1 82bde2498ccc5443ee9153ab25c293aa2d902713
SHA512 4f158544272be56e336a5c62c9e74c21a314b0b5bfda4b5d7401fc79e89517a4cf3ceb25ad99c94a12b567710d63a7d6c378c7e1bc0d7365840d7e3fa03df5d9
SSDEEP 3072:lZcqniTy2EE5zlEQ9yekamuTcQNY+ktECY6a2aTCCVjwFfojMMb5OXHIwgh:cNu2jf9yPuTcQNIEC08fojMWCHg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 209KB

file.exe

IMPHASH ec7b3dbd80b40e9b023e18c70dc965d7
SHA256 1ba08967b94a3066d9de6040a7ee7f2db2c80e07977d30ff1d8ba24fedfdf6f1
MD5 0f2c056a986063669f8d7b6dce9f392c
SHA1 82bde2498ccc5443ee9153ab25c293aa2d902713
SHA512 4f158544272be56e336a5c62c9e74c21a314b0b5bfda4b5d7401fc79e89517a4cf3ceb25ad99c94a12b567710d63a7d6c378c7e1bc0d7365840d7e3fa03df5d9
SSDEEP 3072:lZcqniTy2EE5zlEQ9yekamuTcQNY+ktECY6a2aTCCVjwFfojMMb5OXHIwgh:cNu2jf9yPuTcQNIEC08fojMWCHg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20231

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsW OpenMutexW GetConsoleAliasExesLengthA CopyFileExW ReadConsoleOutputCharacterW GetEnvironmentStrings GetCommConfig QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileA SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalHandle CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateProcess WriteConsoleOutputA GetCommandLineW FindFirstChangeNotificationW EnumSystemCodePagesA CancelTimerQueueTimer SearchPathW CopyFileA GetHandleInformation FindResourceA GetModuleHandleW CreateJobObjectW FindFirstVolumeW GlobalFlags CreateNamedPipeW LocalUnlock InterlockedIncrement CloseHandle GetTickCount GetShortPathNameA DeviceIoControl HeapLock GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateA GenerateConsoleCtrlEvent MoveFileW AddAtomW WriteConsoleInputW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect _hread ClearCommBreak SetProcessPriorityBoost GlobalFindAtomA GetVolumeInformationA VerifyVersionInfoA LoadLibraryW ReadFile WriteConsoleW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

CharUpperBuffA GetComboBoxInfo GetMenuInfo

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpWriteData

Sharing