file[.]exe | Triage™

General

Target
file.exe
Size 226KB
Sample221224-n71qdsdb7t
SHA256 ab0fe1c0a27893f04b3edde23ffdf6b5db5ecc44efa3d567008fc95876a2c8f6
MD5 8c29da4e1c79f57e85c550a65f8aae84
SHA1 f34199504a58b4e5178732e4ca26918cb0a03da7
SHA512 bdf1f3fade070dd36ff747eee739468d9bfe82c00e093fdd7116826135efc4aec6337f64ef746db58140067b15300d0b771efd8d8dfd14359ce7704d3416e149
SSDEEP 3072:qDrGmL4BjK5oMoiAiwUhajyn+6wutrqbm2r5cauD1CE7f/ln:2pL4dbM/Aid7+EWdrSaMnh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 226KB

file.exe

IMPHASH 20ccb1944ade4ba7446fef06e4f4523e
SHA256 ab0fe1c0a27893f04b3edde23ffdf6b5db5ecc44efa3d567008fc95876a2c8f6
MD5 8c29da4e1c79f57e85c550a65f8aae84
SHA1 f34199504a58b4e5178732e4ca26918cb0a03da7
SHA512 bdf1f3fade070dd36ff747eee739468d9bfe82c00e093fdd7116826135efc4aec6337f64ef746db58140067b15300d0b771efd8d8dfd14359ce7704d3416e149
SSDEEP 3072:qDrGmL4BjK5oMoiAiwUhajyn+6wutrqbm2r5cauD1CE7f/ln:2pL4dbM/Aid7+EWdrSaMnh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15772

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA EnumDateFormatsW GetPrivateProfileIntA _lread SetVolumeMountPointW GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx ReadFile MoveFileA GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA EnumResourceLanguagesW InterlockedCompareExchange FreeEnvironmentStringsA InterlockedExchangeAdd GetModuleHandleW GetTickCount SetLastError GetLogicalDrives OpenJobObjectA LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing