file[.]exe | Triage™

General

Target
file.exe
Size 218KB
Sample221220-lhmfcscc6v
SHA256 288f3bdb4325931f3ffda1cb3804dba2e4e36d2eba50944f4c95fbb6554cee23
MD5 69629834c8e6175a23994ab0198137a7
SHA1 2000bfede80c20fc3f73bb903ff119d4c4531e9e
SHA512 373e95c57ccc2c51a1c77c637d406828563018d49c235647c5b5bb0995de195492eb9782670b15a08c2fe7967ae6a7df1940cf653b8c2d8581b854883598b606
SSDEEP 3072:Mz9oOLNL949RncMFr7YXpoCf83QOO3aSbZj/MJ7b/gg2acNHCDml:M5oOLN54cMVkXav3RdBIda+Ca
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 218KB

file.exe

IMPHASH 5e207e189c0f8bcfa91707b46251d4e6
SHA256 288f3bdb4325931f3ffda1cb3804dba2e4e36d2eba50944f4c95fbb6554cee23
MD5 69629834c8e6175a23994ab0198137a7
SHA1 2000bfede80c20fc3f73bb903ff119d4c4531e9e
SHA512 373e95c57ccc2c51a1c77c637d406828563018d49c235647c5b5bb0995de195492eb9782670b15a08c2fe7967ae6a7df1940cf653b8c2d8581b854883598b606
SSDEEP 3072:Mz9oOLNL949RncMFr7YXpoCf83QOO3aSbZj/MJ7b/gg2acNHCDml:M5oOLN54cMVkXav3RdBIda+Ca
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21142

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FindResourceW FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeW LocalFree LocalFlags GetNumberOfConsoleMouseButtons ActivateActCtx SetConsoleCtrlHandler PeekNamedPipe GetCurrencyFormatA FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointA ClearCommError lstrlenW CreateDirectoryW GlobalFindAtomA CreateActCtxA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionA GetStringTypeExW DeactivateActCtx WriteFile ResetEvent MoveFileA OpenMutexA FindResourceA GetConsoleFontSize GetConsoleAliasExesLengthA InterlockedDecrement RaiseException RtlUnwind GetStartupInfoW HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

Sharing