file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample221212-lvg2eaba73
SHA256 bfa581fa1070d917e21abb95a4348c07dae563ef463af6a38f5e535077cfe8be
MD5 567a21e5898539e5caf775b4c7ecc1f3
SHA1 148a2bf383b90047527d46e903d1f856def1c99b
SHA512 51a0beecb94b0fedee76f419ce364d3055fcf3d7e38872f4cc4db3a22ca139fc8afeb09c7dadb9d5cfe89fc18438e1cfb207a6471c9acdac9866f5ce4abc6266
SSDEEP 3072:UoLTzv3slvLoPt4mO+qDWm15yQTB5+8+UghuS9FAuJA2cuguEohdBcf0EJ8W4Rbl:USLULoly+qD75+1C521/EoyftT4cpgX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH 27fc514cfd775c984573e93b88b08234
SHA256 bfa581fa1070d917e21abb95a4348c07dae563ef463af6a38f5e535077cfe8be
MD5 567a21e5898539e5caf775b4c7ecc1f3
SHA1 148a2bf383b90047527d46e903d1f856def1c99b
SHA512 51a0beecb94b0fedee76f419ce364d3055fcf3d7e38872f4cc4db3a22ca139fc8afeb09c7dadb9d5cfe89fc18438e1cfb207a6471c9acdac9866f5ce4abc6266
SSDEEP 3072:UoLTzv3slvLoPt4mO+qDWm15yQTB5+8+UghuS9FAuJA2cuguEohdBcf0EJ8W4Rbl:USLULoly+qD75+1C521/EoyftT4cpgX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23430

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW CompareStringW AreFileApisANSI CreateFileW EnumCalendarInfoExA RequestWakeupLatency AddConsoleAliasW CreateFileA SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleA GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogA GetProcAddress LocalAlloc CancelTimerQueueTimer SetHandleInformation CreateJobObjectW WriteConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW CallNamedPipeW GetStringTypeExW GetPrivateProfileSectionNamesW GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement CallNamedPipeA ZombifyActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsW InterlockedExchange GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenA GlobalFindAtomW TerminateJobObject lstrcpynA WritePrivateProfileStructA LoadLibraryW RaiseException RtlUnwind GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

gdi32

GetBoundsRect

Sharing