file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221223-pp216sgd74
SHA256 3d8f37d0a327768b23672154a7ddcf716f6e8a08fb1d9bc3da3e9815ec95ebd8
MD5 46801c92c7ce9ca117fe213ed3b453e1
SHA1 ae1f22be8d44b54c087bb18a217171419ca31998
SHA512 00612f56db85f00a053512bf9f03bade2ea84bafeba5a5d665de8b8fb2ec3c4c1afc20c333894f2f0d1559f88143aae66234be137c6434e92a34b41c04fb9ee2
SSDEEP 3072:QGLEkV5E0pHd9c7WmEt6WAXVTsGnNeljnn7u+oukzMBx5kWBkOuRGK:TLE90N3xmFa4urSukQ5kpjcK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 61149a38ef98ffc09e91dac52a55f7d2
SHA256 3d8f37d0a327768b23672154a7ddcf716f6e8a08fb1d9bc3da3e9815ec95ebd8
MD5 46801c92c7ce9ca117fe213ed3b453e1
SHA1 ae1f22be8d44b54c087bb18a217171419ca31998
SHA512 00612f56db85f00a053512bf9f03bade2ea84bafeba5a5d665de8b8fb2ec3c4c1afc20c333894f2f0d1559f88143aae66234be137c6434e92a34b41c04fb9ee2
SSDEEP 3072:QGLEkV5E0pHd9c7WmEt6WAXVTsGnNeljnn7u+oukzMBx5kWBkOuRGK:TLE90N3xmFa4urSukQ5kpjcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15406

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA EnumDateFormatsW OpenMutexA GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc ReadConsoleInputW SearchPathA GetCommandLineW ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ProcessIdToSessionId OpenFileMappingW lstrcmpW ZombifyActCtx SetConsoleScreenBufferSize CallNamedPipeW lstrcpynA GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeA CreateActCtxA OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW SetVolumeMountPointW VirtualAlloc GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryW GlobalFindAtomW CopyFileW VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeExA CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchange GetTickCount SetLastError GetComputerNameA LoadLibraryW HeapAlloc GetStartupInfoW GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

Sharing