file[.]exe | Triage™

General

Target
file.exe
Size 244KB
Sample221201-trdhtafa76
SHA256 db2653ed3a2c4dce389b0498c7b43b20c18bff72630d4bcf9b79f29257349892
MD5 42ee511c7c5970c3244699264fd3b18a
SHA1 dbf46acca19c424ab5dd65612f9b943781cc8b3e
SHA512 495cdbc66435a27ed1b35437f89781bea6d4907a21256f581f16e926c548f2b0eb5210a842db8870fdfaf8a8eb52a4d81351d2fe1db0244730c9ac0209fa9798
SSDEEP 3072:fi7qH+MuCy++iJC5zVXgZ6kGFQWrMMZ6O0Y10CVKRYEkS7CEGfVaAMYkqsQjgRui:MCy++iIVT/Mi03RYtonYkqsQgRbEath
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 244KB

file.exe

IMPHASH 295af0e0fa74ab5918acf17451b32a88
SHA256 db2653ed3a2c4dce389b0498c7b43b20c18bff72630d4bcf9b79f29257349892
MD5 42ee511c7c5970c3244699264fd3b18a
SHA1 dbf46acca19c424ab5dd65612f9b943781cc8b3e
SHA512 495cdbc66435a27ed1b35437f89781bea6d4907a21256f581f16e926c548f2b0eb5210a842db8870fdfaf8a8eb52a4d81351d2fe1db0244730c9ac0209fa9798
SSDEEP 3072:fi7qH+MuCy++iJC5zVXgZ6kGFQWrMMZ6O0Y10CVKRYEkS7CEGfVaAMYkqsQjgRui:MCy++iIVT/Mi03RYtonYkqsQgRbEath
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18375

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute EnumDateFormatsW FindFirstVolumeA GlobalFlags LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd EnumDateFormatsA GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedIncrement InterlockedExchange GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA _hread ClearCommBreak lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe EnumSystemCodePagesW GetConsoleFontSize LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing