file[.]exe | Triage™

General

Target
file.exe
Size 185KB
Sample221130-pygrlabd46
SHA256 ce0602b9d096ff5329b1a90293ae49425626eefb7eba01b8ea7c95f2fe01d3d3
MD5 e1dc6ea3d72d523c14f96ffebe578764
SHA1 b3de635e67f796d0b615325db664919542b1c16f
SHA512 3c61ca664b9d72f51bc72162c513948dff1567c3465fe50a403d7612f1446e982eac20dcb13d9d5c1c0ef3a0a4c974e4fb387cd28b803d8f2020cdae201de1f5
SSDEEP 3072:0X3MOg8k9BRkz1Ad5It5VfAxY0bI/n+9SHBF7NpfoJfQL90WBwYWM:eMlBRkzDt5VIxYdnHBFrfoJE05
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 185KB

file.exe

IMPHASH 9a63b242751e4004ea2ffcb34a002ba8
SHA256 ce0602b9d096ff5329b1a90293ae49425626eefb7eba01b8ea7c95f2fe01d3d3
MD5 e1dc6ea3d72d523c14f96ffebe578764
SHA1 b3de635e67f796d0b615325db664919542b1c16f
SHA512 3c61ca664b9d72f51bc72162c513948dff1567c3465fe50a403d7612f1446e982eac20dcb13d9d5c1c0ef3a0a4c974e4fb387cd28b803d8f2020cdae201de1f5
SSDEEP 3072:0X3MOg8k9BRkz1Ad5It5VfAxY0bI/n+9SHBF7NpfoJfQL90WBwYWM:eMlBRkzDt5VIxYdnHBFrfoJE05
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18871

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasExesLengthA CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceW EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileW SetComputerNameW GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExA SearchPathA MoveFileExW CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA GetCPInfoExW WriteConsoleOutputA GetCommandLineA EnumDateFormatsW DeleteTimerQueue GetHandleInformation FormatMessageW GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeW InterlockedIncrement CloseHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers GetLogicalDriveStringsW InterlockedExchangeAdd EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileW AddAtomA SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomA GetProcessPriorityBoost SetMailslotInfo HeapWalk TransactNamedPipe GetTickCount EnumSystemCodePagesW VerifyVersionInfoA LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA DeleteFileA

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpReadData

Sharing