file[.]exe | Triage™

General

Target
file.exe
Size 242KB
Sample221201-mk1ansde5t
SHA256 7426df2e27fa6fe145db2c5bb86b7087b48736d10c939851d76eced8b4e161e8
MD5 0f4bf230261f029835318ff68a0728fe
SHA1 21ab653527dc8e603f6431cb8236153d8c8abff9
SHA512 24709b51396fa0c6435e9fcd8d6553ffaa8673d13b857c86bc99963520971b0fb5da19a89b6a0dcbdc35c2c498763b1a70f0d828f453e951e3738ac63b10dcbd
SSDEEP 3072:75LdK4xaPzEQQw57Elgi1LDl4jXIynv6/jLhGmmjPuaqE9DENmrq1eYoDAbEa/F:1RAPzEQjklHynv6rcPusKwqxVEa/F
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 242KB

file.exe

IMPHASH c764953e181ce077d1a829deede82759
SHA256 7426df2e27fa6fe145db2c5bb86b7087b48736d10c939851d76eced8b4e161e8
MD5 0f4bf230261f029835318ff68a0728fe
SHA1 21ab653527dc8e603f6431cb8236153d8c8abff9
SHA512 24709b51396fa0c6435e9fcd8d6553ffaa8673d13b857c86bc99963520971b0fb5da19a89b6a0dcbdc35c2c498763b1a70f0d828f453e951e3738ac63b10dcbd
SSDEEP 3072:75LdK4xaPzEQQw57Elgi1LDl4jXIynv6/jLhGmmjPuaqE9DENmrq1eYoDAbEa/F:1RAPzEQjklHynv6rcPusKwqxVEa/F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18471

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringA SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleW QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW GetVersionExA SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation EnumDateFormatsW FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA GlobalFlags InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetConsoleTitleA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW _hread ClearCommBreak lstrlenW GetStringTypeExA CreateDirectoryExA GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe EnumSystemCodePagesW FindResourceA LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing