file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221224-te21msab84
SHA256 abd9daba9eeb7d42e2ee8acd6078f029b5a2ee9e4a74bfbf8a6123e7daa53ea3
MD5 b9213ac0403e0ca2c5501315fb3db20a
SHA1 82c159c52e31ece28dc0c0231362a8a2d33669d2
SHA512 b899da326e7c1506ef3b314c6b88ad56754bab00723d20024bd59f6351062720c86b27e8d3e64169696954ef784aac0c15fd86cd717db98b0de478f08052e7d8
SSDEEP 3072:CDb2LO4sM75AC2A1gJjL78LYviM5I1FUyDckauDnE3BmbIFf/ln:nLO4HWN3JjXkYviMevBraME3oID
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH 3ad97f4e43892433cafc01e0293aa96f
SHA256 abd9daba9eeb7d42e2ee8acd6078f029b5a2ee9e4a74bfbf8a6123e7daa53ea3
MD5 b9213ac0403e0ca2c5501315fb3db20a
SHA1 82c159c52e31ece28dc0c0231362a8a2d33669d2
SHA512 b899da326e7c1506ef3b314c6b88ad56754bab00723d20024bd59f6351062720c86b27e8d3e64169696954ef784aac0c15fd86cd717db98b0de478f08052e7d8
SSDEEP 3072:CDb2LO4sM75AC2A1gJjL78LYviM5I1FUyDckauDnE3BmbIFf/ln:nLO4HWN3JjXkYviMevBraME3oID
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15900

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathA CopyFileExW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW EnumDateFormatsW OpenJobObjectA GetPrivateProfileIntA _lread SetVolumeMountPointW GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA EnumResourceLanguagesW InterlockedCompareExchange FreeEnvironmentStringsA InterlockedExchangeAdd GetModuleHandleW GetTickCount GetLogicalDrives CreateActCtxA LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing