file[.]exe | Triage™

General

Target
file.exe
Size 244KB
Sample221201-slryksef2s
SHA256 c5bb5b37f2e43323b5a9bdb1bfcc742e1b42e6858de2bdc1bc9c4f92dc546e68
MD5 afc0a41cd7ef32f589f389d577b97ba6
SHA1 778c9077629076b746923319620458b4bc8c8941
SHA512 dbfe1e60174fa9fab27b0c07b42d4fc4e8b6c80b62748206c560f85be8779e555c612738d4be2dbb7cf530751b3ebdfbb00f5a92b3423f1a2c85393d1e7fd361
SSDEEP 3072:Q2NOVkgdeqMSFOFOSV7C5q+k73N/ZltvBNTH6AkqMSZ8hTzpyPvDAbEaBNcS+:0krSIFOSVUs3vltzHBMSkyPsEaBNcS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 244KB

file.exe

IMPHASH 295af0e0fa74ab5918acf17451b32a88
SHA256 c5bb5b37f2e43323b5a9bdb1bfcc742e1b42e6858de2bdc1bc9c4f92dc546e68
MD5 afc0a41cd7ef32f589f389d577b97ba6
SHA1 778c9077629076b746923319620458b4bc8c8941
SHA512 dbfe1e60174fa9fab27b0c07b42d4fc4e8b6c80b62748206c560f85be8779e555c612738d4be2dbb7cf530751b3ebdfbb00f5a92b3423f1a2c85393d1e7fd361
SSDEEP 3072:Q2NOVkgdeqMSFOFOSV7C5q+k73N/ZltvBNTH6AkqMSZ8hTzpyPvDAbEaBNcS+:0krSIFOSVUs3vltzHBMSkyPsEaBNcS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18375

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute EnumDateFormatsW FindFirstVolumeA GlobalFlags LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd EnumDateFormatsA GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedIncrement InterlockedExchange GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA _hread ClearCommBreak lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe EnumSystemCodePagesW GetConsoleFontSize LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing