file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221212-pt2wzabc96
SHA256 ea9b50f71a7bf3ef4cb7324dd3ca0c90c2b1c43b5a2d270e9e1608d779eed61f
MD5 448483f45bf731b6c6e41ed78a5b6b1b
SHA1 cee5c33c2c0a32dc35fb61797d65f003224f02fc
SHA512 cfc1eeff062f4611bfca71af03a58308852f86fc0e13aca2645f448b1c68858b85585e67f482e42c8baac118b500451ff6ad165c35d65576d73a8894c3e45f61
SSDEEP 6144:aq5cK1pL03tG3Y8AJT29mkpp7Zoyfta75U6DcpgX:X5ciI9G3cT29X7a1RIp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH 9711117be9c20001cb5349cb0695ce86
SHA256 ea9b50f71a7bf3ef4cb7324dd3ca0c90c2b1c43b5a2d270e9e1608d779eed61f
MD5 448483f45bf731b6c6e41ed78a5b6b1b
SHA1 cee5c33c2c0a32dc35fb61797d65f003224f02fc
SHA512 cfc1eeff062f4611bfca71af03a58308852f86fc0e13aca2645f448b1c68858b85585e67f482e42c8baac118b500451ff6ad165c35d65576d73a8894c3e45f61
SSDEEP 6144:aq5cK1pL03tG3Y8AJT29mkpp7Zoyfta75U6DcpgX:X5ciI9G3cT29X7a1RIp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23558

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthA CompareStringA AreFileApisANSI CreateFileW EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasA CreateFileA SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileW CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogW GetProcAddress LocalAlloc CancelTimerQueueTimer SetHandleInformation CreateJobObjectW WriteConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupSeek GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW CallNamedPipeW GetStringTypeExW GetPrivateProfileSectionNamesW GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd EnumCalendarInfoW GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetModuleHandleW ZombifyActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsW InterlockedExchange GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenA GlobalFindAtomA TerminateJobObject lstrcpynA WritePrivateProfileStructA LoadLibraryW RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

gdi32

GetBoundsRect

Sharing