file[.]exe | Triage™

General

Target
file.exe
Size 243KB
Sample221130-ml4pgscd74
SHA256 46c9a6c81d90f2055e1af5bc853053c9154d353b88db9aeed33ceeaae20f106d
MD5 31b9556c0d5282ffa650dee1c1d47962
SHA1 4858032b176fba7d77dc6d4ad0cf6cfccd2bbcd8
SHA512 5456f814ca617ca1ce0b3b8185aba7b727e5ea2b9aca9d2cb1da777dd63a93ac7385b23a4bdbaaac13f2271943941ae49b32230cd9d2ee3c56e1ff0fbbbd7322
SSDEEP 3072:AX0MGs2FqO0/hAd5LR3rqhkmgGUg7fYU5VETZAvvkmVwFMVZqzTAiL90HU55y:xMCqO0/k3i/v9fYUPEt0vk8gB0H
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 243KB

file.exe

IMPHASH 9a63b242751e4004ea2ffcb34a002ba8
SHA256 46c9a6c81d90f2055e1af5bc853053c9154d353b88db9aeed33ceeaae20f106d
MD5 31b9556c0d5282ffa650dee1c1d47962
SHA1 4858032b176fba7d77dc6d4ad0cf6cfccd2bbcd8
SHA512 5456f814ca617ca1ce0b3b8185aba7b727e5ea2b9aca9d2cb1da777dd63a93ac7385b23a4bdbaaac13f2271943941ae49b32230cd9d2ee3c56e1ff0fbbbd7322
SSDEEP 3072:AX0MGs2FqO0/hAd5LR3rqhkmgGUg7fYU5VETZAvvkmVwFMVZqzTAiL90HU55y:xMCqO0/k3i/v9fYUPEt0vk8gB0H
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasExesLengthA CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceW EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileW SetComputerNameW GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExA SearchPathA MoveFileExW CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA GetCPInfoExW WriteConsoleOutputA GetCommandLineA EnumDateFormatsW DeleteTimerQueue GetHandleInformation FormatMessageW GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeW InterlockedIncrement CloseHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers GetLogicalDriveStringsW InterlockedExchangeAdd EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileW AddAtomA SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomA GetProcessPriorityBoost SetMailslotInfo HeapWalk TransactNamedPipe GetTickCount EnumSystemCodePagesW VerifyVersionInfoA LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA DeleteFileA

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpReadData

Sharing