file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221223-hamjlsbb7t
SHA256 869fdf5d48680ea42c3947c4c8005b7fe69c303325880cc1d378d7611b2033dd
MD5 53f765bcf40369da312fb37452c5b812
SHA1 248ea6dc7037cd828cefa828c97b192ec302ab4b
SHA512 a8bccc9c3b31c24ef04833369adcfedb55b2b4d86f38e0a6ac55732ec357933006afcfbfe5096aea9b9b6c1f152071c44e13bac45541f063728ff4cc9ce1b014
SSDEEP 3072:jWLY+f5/xOE/zadaRfoVwA+9dcOyoRDB7TAu+oukzytL6LeWBkOuRGK:yLYAxOqzXzA+6oRDB3ZukWtOKpjcK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 04021a7973cc9386d8ec65f9011a3f00
SHA256 869fdf5d48680ea42c3947c4c8005b7fe69c303325880cc1d378d7611b2033dd
MD5 53f765bcf40369da312fb37452c5b812
SHA1 248ea6dc7037cd828cefa828c97b192ec302ab4b
SHA512 a8bccc9c3b31c24ef04833369adcfedb55b2b4d86f38e0a6ac55732ec357933006afcfbfe5096aea9b9b6c1f152071c44e13bac45541f063728ff4cc9ce1b014
SSDEEP 3072:jWLY+f5/xOE/zadaRfoVwA+9dcOyoRDB7TAu+oukzytL6LeWBkOuRGK:yLYAxOqzXzA+6oRDB3ZukWtOKpjcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15374

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc ReadConsoleInputW SearchPathA GetCommandLineW InterlockedIncrement InterlockedExchange ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx CallNamedPipeW GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeA CreateActCtxW OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW SetVolumeMountPointW VirtualAlloc GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryW GlobalFindAtomW CopyFileW VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedDecrement GetTickCount SetLastError SetConsoleScreenBufferSize LoadLibraryW HeapAlloc GetStartupInfoW GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

Sharing