file[.]exe | Triage™

General

Target
file.exe
Size 231KB
Sample221225-11mleafc8w
SHA256 88948b276a9732fe05e0ea8b8a0d2a33d0d9083d1b7e3f09b4d28b6b192deae1
MD5 3eaec07698bd9747f91d905b6bf78f21
SHA1 b596b905890c03ed7c89df0ffa254be5b42b9fe7
SHA512 cd6dd8fdaeeb8abbacf689b466813328710b952df159d1cce92168e66753d699302ea41a9c6b118f1ce4eae412e5671c5bedab06e3799bc21a3fe2e661cb5468
SSDEEP 3072:ClmwLUF54sRzNxLR0kXR5Ch//Kc6+gaklS1g/tK8YDwKCLrcSb54VIcVTuh:sLUAs1zLR0kh5Xn4qtK8vbIr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 231KB

file.exe

IMPHASH 6a8f260c43148885d76dffe1ee7a8503
SHA256 88948b276a9732fe05e0ea8b8a0d2a33d0d9083d1b7e3f09b4d28b6b192deae1
MD5 3eaec07698bd9747f91d905b6bf78f21
SHA1 b596b905890c03ed7c89df0ffa254be5b42b9fe7
SHA512 cd6dd8fdaeeb8abbacf689b466813328710b952df159d1cce92168e66753d699302ea41a9c6b118f1ce4eae412e5671c5bedab06e3799bc21a3fe2e661cb5468
SSDEEP 3072:ClmwLUF54sRzNxLR0kXR5Ch//Kc6+gaklS1g/tK8YDwKCLrcSb54VIcVTuh:sLUAs1zLR0kh5Xn4qtK8vbIr
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14980

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AreFileApisANSI SetHandleCount GetProcessPriorityBoost GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree GlobalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA OpenJobObjectW GetConsoleAliasA _lread SetVolumeMountPointA EnumResourceLanguagesW LoadModule lstrlenW CreateDirectoryW GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA InterlockedCompareExchange FreeEnvironmentStringsA InterlockedExchangeAdd GetModuleHandleW SetLastError GetLogicalDrives EnumDateFormatsW OpenMutexW GetPrivateProfileIntA LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

DrawCaption

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownA

Sharing