file[.]exe | Triage™

General

Target
file.exe
Size 376KB
Sample221225-at25eaah39
SHA256 d95060d1ab4dff434f55b8d5a660c87783d16e16a47bb5fe30c075f7e7234da1
MD5 c0fd9c661fbfccb0ea77a538ea6cc049
SHA1 b7358df1eb0f1c4292dfca207e0617a5a8d12da9
SHA512 cd38eb27fae98e8520262921fdcc23b4273f4acb637756d96999cdee0394082928e80340140e59f84d8f121c03816410b66d3d5f358122053a314732ee4c1c29
SSDEEP 6144:iFLMx0+YGrSLdbuzsOEVhmfKJqszVI3+wsaMkQ08:Ioud6SJqsOG9tz6+g7Q08
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 376KB

file.exe

IMPHASH ff6eadc44bfbddffce47ad40ccb423dd
SHA256 d95060d1ab4dff434f55b8d5a660c87783d16e16a47bb5fe30c075f7e7234da1
MD5 c0fd9c661fbfccb0ea77a538ea6cc049
SHA1 b7358df1eb0f1c4292dfca207e0617a5a8d12da9
SHA512 cd38eb27fae98e8520262921fdcc23b4273f4acb637756d96999cdee0394082928e80340140e59f84d8f121c03816410b66d3d5f358122053a314732ee4c1c29
SSDEEP 6144:iFLMx0+YGrSLdbuzsOEVhmfKJqszVI3+wsaMkQ08:Ioud6SJqsOG9tz6+g7Q08
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17025

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA lstrcmpA SearchPathA CopyFileExW CallNamedPipeW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement FindFirstChangeNotificationW FindResourceA ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree LocalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BackupWrite CreateActCtxA SetFileApisToOEM _lread SetVolumeMountPointW GetSystemWindowsDirectoryA lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA InterlockedCompareExchange FreeEnvironmentStringsA InterlockedExchangeAdd GetModuleHandleW GetTickCount GetLogicalDrives OpenMutexW GetConsoleAliasesLengthA EnumDateFormatsW GetPrivateProfileIntA LoadLibraryA MultiByteToWideChar GetLastError WideCharToMultiByte GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc VirtualAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

user32

DrawCaption

gdi32

GetBrushOrgEx

advapi32

SetThreadToken InitiateSystemShutdownW

Sharing