file[.]exe | Triage™

General

Target
file.exe
Size 243KB
Sample221130-y2p2tabh22
SHA256 9bca17096709fec177897f364087a44dcb92f459eb228c3c9df88f08077f3d16
MD5 82f095846b13f53d5ad85871b6f0dc44
SHA1 0ac83721e59ae4a0b5d0cd143a575cf60a7988d5
SHA512 f1da7dc777247ba9c535d72d52d31eecd1b870f00713975439ca9b827cbb2096e70dcfcd598ba57c720564d4d20b4ed412ea8f8f765c81378b7204b7fd7f93e9
SSDEEP 6144:6Mkme7iuhceiQ4zFIqnhQRoSzeAhsDtbac+MQX:6MVeN+lTzFI0hEoSzeAKV3RQX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 243KB

file.exe

IMPHASH 095434e1a22ef93b14e63f48dd91383c
SHA256 9bca17096709fec177897f364087a44dcb92f459eb228c3c9df88f08077f3d16
MD5 82f095846b13f53d5ad85871b6f0dc44
SHA1 0ac83721e59ae4a0b5d0cd143a575cf60a7988d5
SHA512 f1da7dc777247ba9c535d72d52d31eecd1b870f00713975439ca9b827cbb2096e70dcfcd598ba57c720564d4d20b4ed412ea8f8f765c81378b7204b7fd7f93e9
SSDEEP 6144:6Mkme7iuhceiQ4zFIqnhQRoSzeAhsDtbac+MQX:6MVeN+lTzFI0hEoSzeAKV3RQX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18183

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW VerifyVersionInfoA EnumDateFormatsW GetHandleInformation FormatMessageW GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeA InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileA AddAtomA SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe SetLastError EnumSystemCodePagesW CancelTimerQueueTimer LoadLibraryW CloseHandle GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpReadData

Sharing