file[.]exe | Triage™

General

Target
file.exe
Size 237KB
Sample221208-2l4f2sef9v
SHA256 73e288a8e0809ec12c1d2cc35e86ec063f11177140381feb16791a22ecdc5de4
MD5 357262f4ed0272aaf29776b5cee85670
SHA1 673be76ba2e047a80efa7ecc1da1466054414dea
SHA512 4bc2ffffb3011d17de1e957748f95bdbb3899a6f95485a6e54caba4ad39054294e6463269a5097cebebf6389c53dc87f3f61322cf6008e9b9d8a7c6792a747e6
SSDEEP 3072:5hF2DHxbep8QIlRJ5dDUX4Coi4Rx3MkPmzf8g2EUDXIBTaX2ChWwWaN0wf:5h0EtIFaItr3MkOzEtFDr0w
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 237KB

file.exe

IMPHASH 3d084c6e7e52ce6272ebd1b27b1d12b0
SHA256 73e288a8e0809ec12c1d2cc35e86ec063f11177140381feb16791a22ecdc5de4
MD5 357262f4ed0272aaf29776b5cee85670
SHA1 673be76ba2e047a80efa7ecc1da1466054414dea
SHA512 4bc2ffffb3011d17de1e957748f95bdbb3899a6f95485a6e54caba4ad39054294e6463269a5097cebebf6389c53dc87f3f61322cf6008e9b9d8a7c6792a747e6
SSDEEP 3072:5hF2DHxbep8QIlRJ5dDUX4Coi4Rx3MkPmzf8g2EUDXIBTaX2ChWwWaN0wf:5h0EtIFaItr3MkOzEtFDr0w
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22583

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringW AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency AddConsoleAliasW CreateFileW SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc CancelTimerQueueTimer SetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA CallNamedPipeA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetNamedPipeHandleStateW SetThreadAffinityMask WaitForSingleObjectEx GetNamedPipeInfo ZombifyActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsW InterlockedExchange SetConsoleTitleW SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject lstrcpynA GetStringTypeExW LoadLibraryW RaiseException RtlUnwind GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

gdi32

GetBoundsRect

Sharing