file[.]exe | Triage™

General

Target
file.exe
Size 191KB
Sample221202-ddb5tsba2t
SHA256 c2bb35d36cbf438f3c2013a83115b783db85c04f3bc237f3798e884b8ebdff23
MD5 bff9693e292aad0bbda02492bb3aa681
SHA1 237e200bebe82d2a0bfecdb5688c0e041b696ac0
SHA512 ddc5beb5fd812367f70f34749f55ff50b74468068899141c96a7d4e9a21ba5db0d5e737844b029858c1e697e9d0e8409519373d69cb863d4e3d4c2dcedf279f4
SSDEEP 3072:2QfXSXjeGetYar6XI5AdDCQDehXG3HcaoZBQPKjoa7hhnRs9E3AZxpR/aW:qYYar4SVC8BBQPKjb7Gvp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 191KB

file.exe

IMPHASH c24ba5a868480ad6d3a33414ba7faf9e
SHA256 c2bb35d36cbf438f3c2013a83115b783db85c04f3bc237f3798e884b8ebdff23
MD5 bff9693e292aad0bbda02492bb3aa681
SHA1 237e200bebe82d2a0bfecdb5688c0e041b696ac0
SHA512 ddc5beb5fd812367f70f34749f55ff50b74468068899141c96a7d4e9a21ba5db0d5e737844b029858c1e697e9d0e8409519373d69cb863d4e3d4c2dcedf279f4
SSDEEP 3072:2QfXSXjeGetYar6XI5AdDCQDehXG3HcaoZBQPKjoa7hhnRs9E3AZxpR/aW:qYYar4SVC8BBQPKjb7Gvp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18055

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock FindFirstVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeA GetCurrentDirectoryA GetDriveTypeW CreateMailslotA CommConfigDialogW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA DeleteTimerQueue GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags LoadLibraryA DuplicateHandle EnumDateFormatsA GetSystemDirectoryW VerSetConditionMask GetComputerNameW EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesW CopyFileW GetComputerNameExW GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedDecrement InterlockedExchange GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointA _hread GetWindowsDirectoryA ClearCommBreak lstrlenW GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost SetMailslotInfo HeapWalk GetNamedPipeInfo EnumSystemCodePagesA UnregisterWait LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing