file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221223-j3vw5abd21
SHA256 5a17a672a39ad5c7ca2e981f633d8ee3f1cec6f0dc31bb96350775b898c98944
MD5 2c05052c3bb826f33c2ffc9a0f386435
SHA1 ba42692ca5a9dafc489abc569c25b5c304b00ea8
SHA512 01a04dee309908cee076c050465bbf6833fbb59b6456df9d22b77341590d89362f26cdf920c270b3b7679d3ef73f2ee3ec9e307e957cb6d2df06607d4f300a6c
SSDEEP 3072:WJLwUzf5fYU4fm6hvsEq0WtCYZAiRtu+oukzREWBkOuRGK:CLwUFYU4v0omCYaDuk9EpjcK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 04021a7973cc9386d8ec65f9011a3f00
SHA256 5a17a672a39ad5c7ca2e981f633d8ee3f1cec6f0dc31bb96350775b898c98944
MD5 2c05052c3bb826f33c2ffc9a0f386435
SHA1 ba42692ca5a9dafc489abc569c25b5c304b00ea8
SHA512 01a04dee309908cee076c050465bbf6833fbb59b6456df9d22b77341590d89362f26cdf920c270b3b7679d3ef73f2ee3ec9e307e957cb6d2df06607d4f300a6c
SSDEEP 3072:WJLwUzf5fYU4fm6hvsEq0WtCYZAiRtu+oukzREWBkOuRGK:CLwUFYU4v0omCYaDuk9EpjcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15390

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc ReadConsoleInputW SearchPathA GetCommandLineW InterlockedIncrement InterlockedExchange ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess InterlockedCompareExchange GetConsoleMode FindFirstVolumeA LocalFree LocalFlags ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx CallNamedPipeW GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeA CreateActCtxW OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW SetVolumeMountPointW VirtualAlloc GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryW GlobalFindAtomW CopyFileW VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedDecrement GetTickCount SetLastError SetConsoleScreenBufferSize LoadLibraryW HeapAlloc GetStartupInfoW GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

Sharing