file[.]exe | Triage™

General

Target
file.exe
Size 241KB
Sample221220-swbpcaab96
SHA256 56620ac330bd56eedb5dab95166a9b128bcb09783ac67caea3e84c8f218a0c8e
MD5 3b53587307822e59eb2ac5c1849263c7
SHA1 ccdfdf6ada38de1c9e7784fcc8852ebf58c5b940
SHA512 51986ad6bdeca247f3dbc48d4018fcd34dd39d8a16141ade4bd928537ffc68cdcdf692948b3b8b9d66fe5522b2361c2fdcfb7e4832e0fffbf381c1b83e1baeee
SSDEEP 3072:BX8Gj9rLYT6iIqR5tWeAGf7zFrO3pUM0l3ChMLu/NHKH3SB7b/0w9yNHCDml:lV5rLYT6iIuWVK7BvyfHKXSZriCa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 241KB

file.exe

IMPHASH 712f4e844d727ff424bf04cc2a2ca69c
SHA256 56620ac330bd56eedb5dab95166a9b128bcb09783ac67caea3e84c8f218a0c8e
MD5 3b53587307822e59eb2ac5c1849263c7
SHA1 ccdfdf6ada38de1c9e7784fcc8852ebf58c5b940
SHA512 51986ad6bdeca247f3dbc48d4018fcd34dd39d8a16141ade4bd928537ffc68cdcdf692948b3b8b9d66fe5522b2361c2fdcfb7e4832e0fffbf381c1b83e1baeee
SSDEEP 3072:BX8Gj9rLYT6iIqR5tWeAGf7zFrO3pUM0l3ChMLu/NHKH3SB7b/0w9yNHCDml:lV5rLYT6iIuWVK7BvyfHKXSZriCa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22326

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexW GetConsoleAliasesLengthW AreFileApisANSI EnumCalendarInfoExW IsSystemResumeAutomatic GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointA SearchPathA MoveFileW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryW CreateMailslotA TlsSetValue GetProcAddress LocalAlloc GetCPInfoExW DeleteTimerQueueTimer FormatMessageW ContinueDebugEvent InterlockedCompareExchange SetConsoleMode FindFirstVolumeA LocalFree LocalFlags LoadLibraryA GetNumberOfConsoleMouseButtons ZombifyActCtx SetConsoleCtrlHandler PeekNamedPipe GetCurrencyFormatA FindNextVolumeW CreateActCtxW GetTapeParameters OpenJobObjectA GetPrivateProfileIntA _lread FreeEnvironmentStringsW GetPrivateProfileStructW InterlockedExchangeAdd GetDiskFreeSpaceExA BackupWrite SetVolumeMountPointA ClearCommError lstrlenA CreateDirectoryW GlobalFindAtomW CreateActCtxA CopyFileW VerSetConditionMask EnumSystemLocalesW QueryDepthSList WritePrivateProfileSectionW GetStringTypeExW CreateMutexW DeactivateActCtx WriteFile GetLogicalDriveStringsW ResetEvent MoveFileExW OpenMutexA GetConsoleFontSize GetConsoleAliasExesLengthW FindResourceA InterlockedDecrement GetModuleHandleW SetLastError GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

CharUpperBuffA

Sharing