file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample221219-dblaqaeb32
SHA256 431e4e5107d30d5ef9e4d457adc7d15d2665a061ee17dde1750b8d6e8a442fc1
MD5 daaf312180fa52178f7da19b9c09cf94
SHA1 0725b724313d6e294d0bf9fe964ee3618f5351c9
SHA512 4891589dc0bf15a8586abe20e228e804043b7275a6751356934fdc661f4b2f470833811c601594a96a743c569564897c4700ff90462b758a24268b4cb0163126
SSDEEP 3072:jXidLtIXaRjvtRiuuRqLT3/tfb+owBFeVBvaNRAtOba+/lmJCjcbImdzmuX:jydLtI8xuoRMBEVBC0ilECjcbXF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH c50bea46cfddfdc15672a96efbafed97
SHA256 431e4e5107d30d5ef9e4d457adc7d15d2665a061ee17dde1750b8d6e8a442fc1
MD5 daaf312180fa52178f7da19b9c09cf94
SHA1 0725b724313d6e294d0bf9fe964ee3618f5351c9
SHA512 4891589dc0bf15a8586abe20e228e804043b7275a6751356934fdc661f4b2f470833811c601594a96a743c569564897c4700ff90462b758a24268b4cb0163126
SSDEEP 3072:jXidLtIXaRjvtRiuuRqLT3/tfb+owBFeVBvaNRAtOba+/lmJCjcbImdzmuX:jydLtI8xuoRMBEVBC0ilECjcbXF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20790

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExA DeleteTimerQueueTimer FindResourceW FormatMessageW ContinueDebugEvent InterlockedCompareExchange GetConsoleSelectionInfo FindFirstVolumeW LocalFree GlobalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe FindNextVolumeW FreeEnvironmentStringsW BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile ResetEvent OpenMutexA FindResourceA GetConsoleFontSize GetConsoleAliasExesLengthA MoveFileA InterlockedDecrement RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW

user32

GetMessageExtraInfo

Sharing