file[.]exe | Triage™

General

Target
file.exe
Size 208KB
Sample221127-ya81lsdb58
SHA256 cdff31efb1fa1a61cd576c3c183b2ae9b34927736920aa463196ed2c5aa32b76
MD5 27adfaf3e5a5e802a7b82c5fde06b022
SHA1 b30410c248e80e5e7d0f626595ba706ccfa4e75c
SHA512 4386eea147393cf770294e7d4182b264521bfcbf175c31489e24d818f78fa5abd5faff1b3fa14ae4c9157c9e2a88953f0017c6b8c17e557e30815fc654acac24
SSDEEP 6144:m4vWGk1aX7PPuImKRU8YcefmhIkoeO50R/l:m4vN3iKRQcefC050Rt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 208KB

file.exe

IMPHASH 419e1b6a3cfb661788cbf91f74672e59
SHA256 cdff31efb1fa1a61cd576c3c183b2ae9b34927736920aa463196ed2c5aa32b76
MD5 27adfaf3e5a5e802a7b82c5fde06b022
SHA1 b30410c248e80e5e7d0f626595ba706ccfa4e75c
SHA512 4386eea147393cf770294e7d4182b264521bfcbf175c31489e24d818f78fa5abd5faff1b3fa14ae4c9157c9e2a88953f0017c6b8c17e557e30815fc654acac24
SSDEEP 6144:m4vWGk1aX7PPuImKRU8YcefmhIkoeO50R/l:m4vN3iKRQcefC050Rt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19959

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsW OpenMutexW GetConsoleAliasExesLengthA CopyFileExW ReadConsoleOutputCharacterW FillConsoleOutputAttribute GetCommConfig QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileA SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalHandle CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA TerminateProcess WriteConsoleOutputA GetCommandLineW EnumSystemCodePagesW CancelTimerQueueTimer GetHandleInformation FindResourceA GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeW LocalUnlock InterlockedIncrement CloseHandle GetTickCount GetShortPathNameA DeviceIoControl HeapLock GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW GenerateConsoleCtrlEvent MoveFileW AddAtomW WriteConsoleInputW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW VirtualProtect _hread ClearCommBreak QueryMemoryResourceNotification GlobalFindAtomW GetMailslotInfo HeapWalk SetFilePointer GetVolumeInformationA LoadLibraryW VerifyVersionInfoA GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

gdi32

GetCharABCWidthsA GetCharWidthA

winhttp

WinHttpWriteData

Sharing