file[.]exe | Triage™

General

Target
file.exe
Size 184KB
Sample221201-kmltysfb7v
SHA256 1ff06d40d9d59c163ae129a5d1ee29993a84c6fe0a40a0c83554c0b772e55ef4
MD5 81e8f297b0148135076de36fbfb58226
SHA1 a22bd3c67b107eb8bcea4c94c21c0b7773602059
SHA512 31aad77208faa8aac951701df643a7e46045dea8d9de3dfad0579dc8348b94c9b2c2e3643268a81b2e0d3fef0b2d8e1daff6656a803fdc2ed2b1e79afc58e76d
SSDEEP 3072:8fMjYHsCdyC+WvirC5M3ulc79o6kI93W0UPDeBNgTYw3zCgKRw+64ngyQA:QMGdyCnv6+lcbhnUPSBQVeg+M4y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 184KB

file.exe

IMPHASH b74471617151676fafb49651b36e2427
SHA256 1ff06d40d9d59c163ae129a5d1ee29993a84c6fe0a40a0c83554c0b772e55ef4
MD5 81e8f297b0148135076de36fbfb58226
SHA1 a22bd3c67b107eb8bcea4c94c21c0b7773602059
SHA512 31aad77208faa8aac951701df643a7e46045dea8d9de3dfad0579dc8348b94c9b2c2e3643268a81b2e0d3fef0b2d8e1daff6656a803fdc2ed2b1e79afc58e76d
SSDEEP 3072:8fMjYHsCdyC+WvirC5M3ulc79o6kI93W0UPDeBNgTYw3zCgKRw+64ngyQA:QMGdyCnv6+lcbhnUPSBQVeg+M4y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18215

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleW QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW EnumDateFormatsW CancelTimerQueueTimer GetHandleInformation FormatMessageW CreateJobObjectW FindFirstVolumeA GlobalFlags CreateNamedPipeA InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetConsoleTitleA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent MoveFileA AddAtomW SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe EnumSystemCodePagesW VerifyVersionInfoA LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing