file[.]exe | Triage™

General

Target
file.exe
Size 185KB
Sample221201-exjjpagh7t
SHA256 e634674a268490f78538c70db1de257d9b2d084e2b2517cb2d02f5e7215fffbb
MD5 71b093f166103307f5f0201b9759da23
SHA1 568e0375e666e77ddc9b5e838b6b8d8f962d0e5e
SHA512 711fd5d095689abccaa6adc9913a20f0c31c561aabaf78e5c2162352477ede2153de912e48be29fd60f1d325a5ff3494fca2c4402dc058f742f7041c5dd989b5
SSDEEP 3072:V1dMlBrOURI1Rwir655GY5gmF60DdJTr4+4I0AWDKRw+6j7oWd1:5MbRI1RwnH5gmF6QHr4y0Ae+MXo+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 185KB

file.exe

IMPHASH 6b96c20b4781a1030934c8d59a1a1452
SHA256 e634674a268490f78538c70db1de257d9b2d084e2b2517cb2d02f5e7215fffbb
MD5 71b093f166103307f5f0201b9759da23
SHA1 568e0375e666e77ddc9b5e838b6b8d8f962d0e5e
SHA512 711fd5d095689abccaa6adc9913a20f0c31c561aabaf78e5c2162352477ede2153de912e48be29fd60f1d325a5ff3494fca2c4402dc058f742f7041c5dd989b5
SSDEEP 3072:V1dMlBrOURI1Rwir655GY5gmF60DdJTr4+4I0AWDKRw+6j7oWd1:5MbRI1RwnH5gmF6QHr4y0Ae+MXo+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18375

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleW QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW EnumDateFormatsW CancelTimerQueueTimer GetHandleInformation FormatMessageW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeA InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetConsoleTitleA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent MoveFileA AddAtomW SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe SetLastError EnumSystemCodePagesW VerifyVersionInfoA LoadLibraryW CloseHandle GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthW GetCharABCWidthsA

winhttp

WinHttpReadData

Sharing