file[.]exe | Triage™

General

Target
file.exe
Size 375KB
Sample221224-2fynlsdh8v
SHA256 4eec0c9fdbaa1d75ee8370a8688f3e89ac4a00ad5696d5bc05c386a81aece656
MD5 254775bd8a04278e20b7cf97f50464ce
SHA1 60a92711b8702be60b3dd522ad7066b6be6faa92
SHA512 8ed3365d0a49915323065dc27ec8d003e9e4de658b4c682f324ed46fa538f4ffd45340d4b22ae6c23a1a82875c3fbc05ba527fcfe24ca17546c90c06d5ca935d
SSDEEP 6144:TTALiH3FJ2j2lsvfG37jwfgH/VLme/gXLu56UyaMV:oGH3FJ2alsHGHwIH/lo7y1C
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 375KB

file.exe

IMPHASH f8983c532cc2f10f4734b040e90445f5
SHA256 4eec0c9fdbaa1d75ee8370a8688f3e89ac4a00ad5696d5bc05c386a81aece656
MD5 254775bd8a04278e20b7cf97f50464ce
SHA1 60a92711b8702be60b3dd522ad7066b6be6faa92
SHA512 8ed3365d0a49915323065dc27ec8d003e9e4de658b4c682f324ed46fa538f4ffd45340d4b22ae6c23a1a82875c3fbc05ba527fcfe24ca17546c90c06d5ca935d
SSDEEP 6144:TTALiH3FJ2j2lsvfG37jwfgH/VLme/gXLu56UyaMV:oGH3FJ2alsHGHwIH/lo7y1C
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15948

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileApisToOEM SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathA CopyFileExW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree LocalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA GetConsoleAliasesLengthA GetPrivateProfileIntA _lread SetVolumeMountPointW GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesW FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW GetTickCount GetLogicalDrives EnumDateFormatsW OpenMutexW OpenJobObjectW LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing