file[.]exe | Triage™

General

Target
file.exe
Size 228KB
Sample221223-vj4kpsca2w
SHA256 2ac911e9b7c9c2a5bc94a3378e4a07425ebfcf67889422579e32b11e942fee6c
MD5 e73e74eb094cd75c4fef906d193bf7bc
SHA1 7d734ce05ef41e92028ca8754db46fb146dc12d7
SHA512 5bc69c2c41e591630320e54a2c7671b477c330087ad5d45c9e7f4b1981084b1927dd2c9cf6e8ea53b7dfc80f89a4bf2e1a98f566b5ad35116c2237ebbed433b5
SSDEEP 3072:eeTJLbPtnRkYHyLNU1Ou+oukzEWBkOuRGK:7dLbHMUdukYpjcK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 99c9d14e3c9258bc4aac1e2d7c3e094b
SHA256 2ac911e9b7c9c2a5bc94a3378e4a07425ebfcf67889422579e32b11e942fee6c
MD5 e73e74eb094cd75c4fef906d193bf7bc
SHA1 7d734ce05ef41e92028ca8754db46fb146dc12d7
SHA512 5bc69c2c41e591630320e54a2c7671b477c330087ad5d45c9e7f4b1981084b1927dd2c9cf6e8ea53b7dfc80f89a4bf2e1a98f566b5ad35116c2237ebbed433b5
SSDEEP 3072:eeTJLbPtnRkYHyLNU1Ou+oukzEWBkOuRGK:7dLbHMUdukYpjcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15825

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc GetCommandLineW DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ProcessIdToSessionId OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA GenerateConsoleCtrlEvent CallNamedPipeW GetCurrencyFormatW FindNextVolumeA CreateActCtxA OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW SetVolumeMountPointW VirtualAlloc GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomA CopyFileW VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeA CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchange GetTickCount SetLastError PeekNamedPipe LoadLibraryW GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

Sharing