file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221223-m7ex9abe6v
SHA256 1d139f3d12162f42764d46eb87311eaa42fa20db849cc5297ab8e90a8f8a89df
MD5 4bbc2d6e64ce6f7e789734f7f7732761
SHA1 0a835b9376c781d2f5f5108b37b58de178376eb0
SHA512 ad33350a7d8ecb388077a9c779bab30882f18322809b5281c8e20196b4fbf0074f4f84657fdcc1ed88349525da2d91dec5b3d03e6d93cbe6e213a6e390ae5f86
SSDEEP 3072:2BLIHyV5LYxAlxLCT/vQEw25uoKu+oukzMffuWBkOuRGK:KLIH/FT/vw25BukIfupjcK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 61149a38ef98ffc09e91dac52a55f7d2
SHA256 1d139f3d12162f42764d46eb87311eaa42fa20db849cc5297ab8e90a8f8a89df
MD5 4bbc2d6e64ce6f7e789734f7f7732761
SHA1 0a835b9376c781d2f5f5108b37b58de178376eb0
SHA512 ad33350a7d8ecb388077a9c779bab30882f18322809b5281c8e20196b4fbf0074f4f84657fdcc1ed88349525da2d91dec5b3d03e6d93cbe6e213a6e390ae5f86
SSDEEP 3072:2BLIHyV5LYxAlxLCT/vQEw25uoKu+oukzMffuWBkOuRGK:KLIH/FT/vw25BukIfupjcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15406

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc ReadConsoleInputW SearchPathA GetCommandLineW ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx SetConsoleScreenBufferSize CallNamedPipeW lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeA CreateActCtxA OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW SetVolumeMountPointW VirtualAlloc GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryW GlobalFindAtomW CopyFileW VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchange GetTickCount SetLastError GetComputerNameA LoadLibraryW HeapAlloc GetStartupInfoW GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

Sharing