file[.]exe | Triage™

General

Target
file.exe
Size 184KB
Sample221130-2d9cbsec6w
SHA256 16eb3c1becb1cadc6ceac24e81d8db4cd67c3f4dbccb7aedd4c174a678441c4a
MD5 5673d38e23fc292a595e37200e9fb90e
SHA1 7c563b8e891aeca0bf87dd9ab53c4436182ab3e0
SHA512 5f3cc00b105c8919e497a8202bbbfc80a6c2f721ed83e7822c7bc74fbdd136e59586302de025267ef3f84c363159e7d541832ac68ab2bd5bc4d428b9d45159a7
SSDEEP 3072:6nMvhOb17UVJEwMn50Sf808YJIS0yLduB2ACHWKRw+6vGQhZ:OMw+VJEh0p5S0yo2A0W+MP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 184KB

file.exe

IMPHASH 095434e1a22ef93b14e63f48dd91383c
SHA256 16eb3c1becb1cadc6ceac24e81d8db4cd67c3f4dbccb7aedd4c174a678441c4a
MD5 5673d38e23fc292a595e37200e9fb90e
SHA1 7c563b8e891aeca0bf87dd9ab53c4436182ab3e0
SHA512 5f3cc00b105c8919e497a8202bbbfc80a6c2f721ed83e7822c7bc74fbdd136e59586302de025267ef3f84c363159e7d541832ac68ab2bd5bc4d428b9d45159a7
SSDEEP 3072:6nMvhOb17UVJEwMn50Sf808YJIS0yLduB2ACHWKRw+6vGQhZ:OMw+VJEh0p5S0yo2A0W+MP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18167

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW VerifyVersionInfoA EnumDateFormatsW GetHandleInformation FormatMessageW GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeA InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileA AddAtomA SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe SetLastError EnumSystemCodePagesW CancelTimerQueueTimer LoadLibraryW CloseHandle GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpReadData

Sharing