file[.]exe | Triage™

General

Target
file.exe
Size 3.6MB
Sample221129-sflvdaaf87
SHA256 0909322dede6d2639bc5aba3de6bbe4a6b9552df002547378c35629b1ceefedf
MD5 6e2b9256f691caef06f67960b0816391
SHA1 0fb9bf1dc40a945fa04083644b4800574b6b619a
SHA512 23614ce8a324d4a0d54acb9b2427eaf37a3534ba23040c8a484f00da36714a991de5637f6cc72e9b45e709f1f94e4086f390ea3615f01013fcd1629cbe81933d
SSDEEP 98304:08AxfdECV5367x4LPwQ3wk6CTkv9hldFOKc8/oXyk8h3gPFzQ85C:08Axfhjjv6CTgRFOKXdthGFc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 3.6MB

file.exe

IMPHASH dc3f9b96b4653782a10bb96ddcb40f2c
SHA256 0909322dede6d2639bc5aba3de6bbe4a6b9552df002547378c35629b1ceefedf
MD5 6e2b9256f691caef06f67960b0816391
SHA1 0fb9bf1dc40a945fa04083644b4800574b6b619a
SHA512 23614ce8a324d4a0d54acb9b2427eaf37a3534ba23040c8a484f00da36714a991de5637f6cc72e9b45e709f1f94e4086f390ea3615f01013fcd1629cbe81933d
SSDEEP 98304:08AxfdECV5367x4LPwQ3wk6CTkv9hldFOKc8/oXyk8h3gPFzQ85C:08Axfhjjv6CTgRFOKXdthGFc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20119

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasExesLengthA CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceW EnumCalendarInfoExA GetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileW SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalHandle CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA GetCPInfoExW WriteConsoleOutputA EnumDateFormatsA VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation FindResourceA CreateJobObjectA FindFirstVolumeA GlobalFlags CreateNamedPipeW InterlockedIncrement CloseHandle GetShortPathNameA DeviceIoControl GetLogicalDriveStringsW InterlockedCompareExchange EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateW GetModuleHandleW DeactivateActCtx GenerateConsoleCtrlEvent MoveFileW AddAtomA SetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak QueryMemoryResourceNotification GlobalFindAtomW GetMailslotInfo HeapWalk SetFilePointer GetTickCount LoadLibraryW EnumSystemCodePagesW GetCommandLineA CreateFileA GetLastError WideCharToMultiByte HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize ReadFile

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpSetOption

Sharing