file[.]exe | Triage™

General

Target
file.exe
Size 269KB
Sample221208-3yffeseg81
SHA256 c74e51c812f50ebffbf145acef4d64560b6c321917dd06fa073e649938312ae3
MD5 a03d80b01daea24bf03a64fb6fdc4d0a
SHA1 123caa13264b0cd8953e379124f29877ad670f74
SHA512 72b948a1f30b8cc28a1a700ed0c6c6bd55d93e7ab273b1ec6504557f2e4cb43b89329abca354a63229fe9c5dc2e9c93917f3c40ed4dda3dd690e7bfcdb15c667
SSDEEP 3072:y+SX+oVf2YE+2B7NZhRX5fqOtxhqy/gha91AufDUDXIBTfgY2G2t2ChWwWaN0wf:y+SvER7NfLzhBgha91rfEKX23r0w
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 269KB

file.exe

IMPHASH 858fc36270e5d394024596dfde2bf4b1
SHA256 c74e51c812f50ebffbf145acef4d64560b6c321917dd06fa073e649938312ae3
MD5 a03d80b01daea24bf03a64fb6fdc4d0a
SHA1 123caa13264b0cd8953e379124f29877ad670f74
SHA512 72b948a1f30b8cc28a1a700ed0c6c6bd55d93e7ab273b1ec6504557f2e4cb43b89329abca354a63229fe9c5dc2e9c93917f3c40ed4dda3dd690e7bfcdb15c667
SSDEEP 3072:y+SX+oVf2YE+2B7NZhRX5fqOtxhqy/gha91AufDUDXIBTfgY2G2t2ChWwWaN0wf:y+SvER7NfLzhBgha91rfEKX23r0w
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30151

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringW AreFileApisANSI EnumCalendarInfoExA RequestWakeupLatency AddConsoleAliasW CreateFileW SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc CancelTimerQueueTimer SetHandleInformation FormatMessageW CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA CallNamedPipeA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetNamedPipeHandleStateW SetThreadAffinityMask WaitForSingleObjectEx GetNamedPipeInfo ZombifyActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsW InterlockedExchange SetConsoleTitleW SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject lstrcpynA GetStringTypeExW LoadLibraryW RaiseException RtlUnwind GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

gdi32

GetBoundsRect

Sharing