file[.]exe | Triage™

General

Target
file.exe
Size 184KB
Sample221130-yyvswsed2v
SHA256 3289502006a84fdf3228454fcfdb37cc8b070a85a9f1ddcea523f1f0627045df
MD5 198adec9193e9d8439446c2e7162f587
SHA1 c1dbffe0751a4b1aad8bb14b116cbbac5a94dce2
SHA512 de0bf5aec25e3daf785751290ccda4a4da84f8685863e5ccd7147f5e4ab6ee4cf7f8482cb688f33802fbe6d788303c0edec4d8a5c62a218228e54ef2ab3e95b8
SSDEEP 3072:r0My61L0m+/AcOMn5tN4NOg1dY9RiD1b/P21XGKRw+6HOqw3:IMCm+/AchWd1GRiDtn21XG+Mu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 184KB

file.exe

IMPHASH 095434e1a22ef93b14e63f48dd91383c
SHA256 3289502006a84fdf3228454fcfdb37cc8b070a85a9f1ddcea523f1f0627045df
MD5 198adec9193e9d8439446c2e7162f587
SHA1 c1dbffe0751a4b1aad8bb14b116cbbac5a94dce2
SHA512 de0bf5aec25e3daf785751290ccda4a4da84f8685863e5ccd7147f5e4ab6ee4cf7f8482cb688f33802fbe6d788303c0edec4d8a5c62a218228e54ef2ab3e95b8
SSDEEP 3072:r0My61L0m+/AcOMn5tN4NOg1dY9RiD1b/P21XGKRw+6HOqw3:IMCm+/AchWd1GRiDtn21XG+Mu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18183

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW VerifyVersionInfoA EnumDateFormatsW GetHandleInformation FormatMessageW GetModuleHandleW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeA InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileA AddAtomA SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe SetLastError EnumSystemCodePagesW CancelTimerQueueTimer LoadLibraryW CloseHandle GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpReadData

Sharing