file[.]exe | Triage™

General

Target
file.exe
Size 200KB
Sample221205-mpd81abd92
SHA256 0eb2a571c5059cbfba0d7fbd6f04d4f5c24513a9be4253239f656ec3c60a31ec
MD5 fb6cb22871e0de9614228806294cc188
SHA1 9f5fe9c923c5bda320f249e183811afd83f01f55
SHA512 09b276eb62d9066c8c0ee6b92b2452f9b07e757221b5d054aa9a86cb2ff56456358ac70f8aad7a7d542309cf66fba0adae43fd417059b661f459eff3cb6f3289
SSDEEP 3072:OdNWmNjEOiei5AMXGaqX3wMX8CGSDFhTDw02rwEINA+z:AiiMXAZvc02sEINA+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 200KB

file.exe

IMPHASH 525b7a020bff3320c106b17a8e85eb32
SHA256 0eb2a571c5059cbfba0d7fbd6f04d4f5c24513a9be4253239f656ec3c60a31ec
MD5 fb6cb22871e0de9614228806294cc188
SHA1 9f5fe9c923c5bda320f249e183811afd83f01f55
SHA512 09b276eb62d9066c8c0ee6b92b2452f9b07e757221b5d054aa9a86cb2ff56456358ac70f8aad7a7d542309cf66fba0adae43fd417059b661f459eff3cb6f3289
SSDEEP 3072:OdNWmNjEOiei5AMXGaqX3wMX8CGSDFhTDw02rwEINA+z:AiiMXAZvc02sEINA+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18391

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringA SetFileApisToANSI EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryA GetModuleHandleW GlobalLock FindFirstVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeA GetCurrentDirectoryA GetDriveTypeW CreateMailslotA CommConfigDialogW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA DeleteTimerQueue GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags LoadLibraryA DuplicateHandle UnregisterWait GetSystemDirectoryW VerSetConditionMask GetComputerNameW EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA GetStringTypeExA EnumSystemCodePagesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathW CopyFileW GetComputerNameExW GetVolumePathNameA GetShortPathNameA FlushFileBuffers lstrcmpW MoveFileW FindNextFileW ResetEvent LocalCompact CreateMutexA LocalLock GlobalWire SetCommState WriteConsoleInputA InitAtomTable FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoW InterlockedDecrement InterlockedExchange GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA _hread ClearCommBreak lstrlenW GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost SetMailslotInfo HeapWalk GetNamedPipeInfo GetPrivateProfileSectionNamesW LoadLibraryW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

gdi32

GetCharABCWidthsA

Sharing