file[.]exe | Triage™

General

Target
file.exe
Size 243KB
Sample221201-fx585agd49
SHA256 a9b9cc10ed9a080760185fb10ad4737d60af919843bb4d7045717e01bf5ccc41
MD5 215f987892105a33c638a70a8863677b
SHA1 91d28277dd0e7aa5158d66a433bc8c352021bddd
SHA512 2699acb300d655f6eb57b955f1c5608350f7f040685b72f16a5a4ccb9007158cf76e23dec33d7c51608de2e7208bd5f115c697cf463a493fe4cb06330e39091d
SSDEEP 3072:hEM5M7TYbgx3OE3+rO5oc6O1yEeN7iNJ0UylCTtJFUyB/8e39X1DWVOMKRw+6o/w:KMBgx3OE3SpEaEtTPRDDWVN+MolVs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 243KB

file.exe

IMPHASH 803893a6be080e80242fd106fddb5ebe
SHA256 a9b9cc10ed9a080760185fb10ad4737d60af919843bb4d7045717e01bf5ccc41
MD5 215f987892105a33c638a70a8863677b
SHA1 91d28277dd0e7aa5158d66a433bc8c352021bddd
SHA512 2699acb300d655f6eb57b955f1c5608350f7f040685b72f16a5a4ccb9007158cf76e23dec33d7c51608de2e7208bd5f115c697cf463a493fe4cb06330e39091d
SSDEEP 3072:hEM5M7TYbgx3OE3+rO5oc6O1yEeN7iNJ0UylCTtJFUyB/8e39X1DWVOMKRw+6o/w:KMBgx3OE3SpEaEtTPRDDWVN+MolVs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18375

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleW QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW EnumDateFormatsW CancelTimerQueueTimer GetHandleInformation FormatMessageW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeA InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetConsoleTitleA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent MoveFileA AddAtomW SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe SetLastError EnumSystemCodePagesW VerifyVersionInfoA LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing