file[.]exe | Triage™

General

Target
file.exe
Size 184KB
Sample221130-w4xtbsdg47
SHA256 33dbfe82ab8f840bc7de23a02d6c7c08e98ca5e21d9bf1e53499baf3c3a1394e
MD5 edbbbe07f8126eead83d073a73ab0da2
SHA1 760c5e661efcfac013e0147263f80c2f2bf8be38
SHA512 fefe77cd0cdfc3952534bff4600758495c383bad07fa8415cbbd27a13fa1be7c915dcf505580a5b69ef5304335aadaf8c2573782fde154f152c8a0a2d688270d
SSDEEP 3072:j3BMNdO3Do5EvQW5KicTuIFhNZbPdRFZw/mW8Kewj:1Mio5EGBuIFhNZbV5JKt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 184KB

file.exe

IMPHASH b483b21d68bf7ee617adb8b3528fcde4
SHA256 33dbfe82ab8f840bc7de23a02d6c7c08e98ca5e21d9bf1e53499baf3c3a1394e
MD5 edbbbe07f8126eead83d073a73ab0da2
SHA1 760c5e661efcfac013e0147263f80c2f2bf8be38
SHA512 fefe77cd0cdfc3952534bff4600758495c383bad07fa8415cbbd27a13fa1be7c915dcf505580a5b69ef5304335aadaf8c2573782fde154f152c8a0a2d688270d
SSDEEP 3072:j3BMNdO3Do5EvQW5KicTuIFhNZbPdRFZw/mW8Kewj:1Mio5EGBuIFhNZbV5JKt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18407

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileW SetComputerNameW GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW EnumDateFormatsW DeleteTimerQueue GetHandleInformation FormatMessageW GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeA InterlockedIncrement DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileA AddAtomA SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomW GetProcessPriorityBoost SetMailslotInfo HeapWalk TransactNamedPipe SetLastError LoadLibraryW EnumSystemCodePagesW VerifyVersionInfoA CreateFileA GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpReadData

Sharing