file[.]exe | Triage™

General

Target
file.exe
Size 192KB
Sample221201-xcdrtahd35
SHA256 01cd6503db5d3d1d56c85dbb6c70d67add6c5a4b90ec9675ccad614346a2af47
MD5 cfb6f2f90f90adfa240ef47cb6e3eeeb
SHA1 20f73ad73f5185038c183ca4bdefcd9d34989daa
SHA512 983a9319408354a97998f905d321d3f2743e6211866c37d1e13e6f10487204c54ce73de4d424bded7184698ca79653ba8c87123009fe5502c892b1b256121a13
SSDEEP 3072:J0KXJm/7cdQRaBA5WVwh6YjGLcM9anlNdsWWXqlPlDAbEa9KonOF:WcdQRaB3ah6YjGAvnDORqoEa9Ko
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 192KB

file.exe

IMPHASH 862efde147d6e81cd1d42fa2fe2ff625
SHA256 01cd6503db5d3d1d56c85dbb6c70d67add6c5a4b90ec9675ccad614346a2af47
MD5 cfb6f2f90f90adfa240ef47cb6e3eeeb
SHA1 20f73ad73f5185038c183ca4bdefcd9d34989daa
SHA512 983a9319408354a97998f905d321d3f2743e6211866c37d1e13e6f10487204c54ce73de4d424bded7184698ca79653ba8c87123009fe5502c892b1b256121a13
SSDEEP 3072:J0KXJm/7cdQRaBA5WVwh6YjGLcM9anlNdsWWXqlPlDAbEa9KonOF:WcdQRaB3ah6YjGAvnDORqoEa9Ko
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18231

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute EnumDateFormatsW FindFirstVolumeA GlobalFlags LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd EnumDateFormatsA GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedDecrement InterlockedExchange GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA _hread GetWindowsDirectoryA ClearCommBreak lstrlenW GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk GetNamedPipeInfo EnumSystemCodePagesW GetConsoleFontSize LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing