file[.]exe | Triage™

General

Target
file.exe
Size 215KB
Sample221219-a4msgaha2v
SHA256 55a54a659c8184d1f2649593c5905e43f21750d96a7fa97a1f6a8a6e11cf9253
MD5 cf288041eb39475dbd6cd227c263fc0e
SHA1 fd4d23c2f6f6ebe0a7c14388e6edac232ba6b402
SHA512 e1efa58c1276e5e9334deda1e534c881e62aded89e64a94e9b5552e9754dd3558c3555148a1b3c89db2cd87093163afb166bd08cdbd0b122f3f7e03c93b527c7
SSDEEP 6144:0V/VLXz3lgJiE+z1GOTA9VKy70JVejcbXF:0VNzzlgd21G6Mgi0J4YbXF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 215KB

file.exe

IMPHASH c50bea46cfddfdc15672a96efbafed97
SHA256 55a54a659c8184d1f2649593c5905e43f21750d96a7fa97a1f6a8a6e11cf9253
MD5 cf288041eb39475dbd6cd227c263fc0e
SHA1 fd4d23c2f6f6ebe0a7c14388e6edac232ba6b402
SHA512 e1efa58c1276e5e9334deda1e534c881e62aded89e64a94e9b5552e9754dd3558c3555148a1b3c89db2cd87093163afb166bd08cdbd0b122f3f7e03c93b527c7
SSDEEP 6144:0V/VLXz3lgJiE+z1GOTA9VKy70JVejcbXF:0VNzzlgd21G6Mgi0J4YbXF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20790

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExA DeleteTimerQueueTimer FindResourceW FormatMessageW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsW BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile ResetEvent OpenMutexA FindResourceA GetConsoleFontSize GetConsoleAliasExesLengthA MoveFileA InterlockedDecrement RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW

user32

GetMessageExtraInfo

Sharing