file[.]exe | Triage™

General

Target
file.exe
Size 185KB
Sample221201-mqldpsad74
SHA256 1969b4f5d2e6b114591c04d5eface4778e34056427fa2cbc1458cb1543348d5e
MD5 00ed2b06962df0988e8fcbdd2207a47b
SHA1 5f8e780dff6f64a9500c81640f44ace1d9a8b4bf
SHA512 1f2e52065ea6e6e14af2a23d909b3e3b271b735c16bba2b3cb63ffdde7a23bf46328e974e5349f969e6289d50945aadb451b2c5d536ac688d4808c78e1265871
SSDEEP 3072:zIjusDwaMzXw52sjl+oRbrlt+KrbDAbEakHZzKwVa4P:E0aMzX/oNRt+KcEa6zZa4P
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 185KB

file.exe

IMPHASH c764953e181ce077d1a829deede82759
SHA256 1969b4f5d2e6b114591c04d5eface4778e34056427fa2cbc1458cb1543348d5e
MD5 00ed2b06962df0988e8fcbdd2207a47b
SHA1 5f8e780dff6f64a9500c81640f44ace1d9a8b4bf
SHA512 1f2e52065ea6e6e14af2a23d909b3e3b271b735c16bba2b3cb63ffdde7a23bf46328e974e5349f969e6289d50945aadb451b2c5d536ac688d4808c78e1265871
SSDEEP 3072:zIjusDwaMzXw52sjl+oRbrlt+KrbDAbEakHZzKwVa4P:E0aMzX/oNRt+KcEa6zZa4P
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18471

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterW CompareStringA SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleW QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW GetVersionExA SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW ReadConsoleOutputA GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation EnumDateFormatsW FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA GlobalFlags InterlockedIncrement LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetConsoleTitleA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointW _hread ClearCommBreak lstrlenW GetStringTypeExA CreateDirectoryExA GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe EnumSystemCodePagesW FindResourceA LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing