file[.]exe | Triage™

General

Target
file.exe
Size 378KB
Sample221224-bc823acf4s
SHA256 30e81baef6d0ba690bfc1854fee2ec1dcfbe86cee247b96e5e11d1be19fbb8a4
MD5 ad1f17a6b09d7d022e370c78e10550e5
SHA1 5bc3a8a8de366b33c334588774d93a340cf68311
SHA512 dca9b03168c16dcdf0e1e9f52a46a12d989de4aa1fe003fa34c12514bd9a908e6943909ca4d9108e0ce951a116698f926f84cbbe9d987b3ca1278dd805303ee2
SSDEEP 6144:aLYJXDOlMe9pU83/FvxHszz0ZXbipHJV6WjD04aXOA7900/8oCbvHk5o:aEJzOL9rvxMzAZmNJZU4RqCuGs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 378KB

file.exe

IMPHASH 0f62cbc7643f42122f2a6a439e78270c
SHA256 30e81baef6d0ba690bfc1854fee2ec1dcfbe86cee247b96e5e11d1be19fbb8a4
MD5 ad1f17a6b09d7d022e370c78e10550e5
SHA1 5bc3a8a8de366b33c334588774d93a340cf68311
SHA512 dca9b03168c16dcdf0e1e9f52a46a12d989de4aa1fe003fa34c12514bd9a908e6943909ca4d9108e0ce951a116698f926f84cbbe9d987b3ca1278dd805303ee2
SSDEEP 6144:aLYJXDOlMe9pU83/FvxHszz0ZXbipHJV6WjD04aXOA7900/8oCbvHk5o:aEJzOL9rvxMzAZmNJZU4RqCuGs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15804

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedExchange DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ProcessIdToSessionId OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA CallNamedPipeW PeekNamedPipe GetCurrencyFormatW FindNextVolumeA CreateActCtxA OpenJobObjectA GetPrivateProfileIntA _lread SetVolumeMountPointW GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx ReadFile MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA EnumResourceLanguagesW FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW GetTickCount SetLastError GetLogicalDrives GenerateConsoleCtrlEvent LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing