file[.]exe | Triage™

General

Target
file.exe
Size 185KB
Sample221130-1tyebshd28
SHA256 3066af120ebb82f4ecc42f5e6afb19da153d4ce8929b71f387ec9f743692c37c
MD5 8cfe8c3d7dc06fe682ccb27080c02087
SHA1 28bd02aa67c060e583cd4d043fa83f702929f8bc
SHA512 d69e5db1d67b2a8ee8d4e2843d900560739c529cbcb53d3b4d0748e3d0da7a036cebbea14de094fd6a9bc4446c7f614ef22074b6ccb682febdd71e1e882bb876
SSDEEP 3072:XXMzWHmeUB+UMn5QzW4tdJCASZNEH/KRw+6XFnS:HMGUB+kAZNa+MXFn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 185KB

file.exe

IMPHASH 095434e1a22ef93b14e63f48dd91383c
SHA256 3066af120ebb82f4ecc42f5e6afb19da153d4ce8929b71f387ec9f743692c37c
MD5 8cfe8c3d7dc06fe682ccb27080c02087
SHA1 28bd02aa67c060e583cd4d043fa83f702929f8bc
SHA512 d69e5db1d67b2a8ee8d4e2843d900560739c529cbcb53d3b4d0748e3d0da7a036cebbea14de094fd6a9bc4446c7f614ef22074b6ccb682febdd71e1e882bb876
SSDEEP 3072:XXMzWHmeUB+UMn5QzW4tdJCASZNEH/KRw+6XFnS:HMGUB+kAZNa+MXFn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18199

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW VerifyVersionInfoA EnumDateFormatsW GetHandleInformation FormatMessageW GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeA InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileA AddAtomA SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe SetLastError EnumSystemCodePagesW CancelTimerQueueTimer LoadLibraryW CloseHandle GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpReadData

Sharing