file[.]exe | Triage™

General

Target
file.exe
Size 374KB
Sample221225-kep7eabc72
SHA256 4ab13258167f4b6367b397e40405c0fee03cb634b38e6af80d7fc3f60a1e8ada
MD5 bc96776a325f5b76292e79be809f0725
SHA1 d80cc049d2af836ce5f034682df58bec6637688c
SHA512 478c00f1b0cdab38bfc9ad60aa936dfea4e5b8b8045c49b0b675fb46465802d849e1c69adcaf98b8df2505512b2696be427d68885066d654a8f73e9ce4596487
SSDEEP 6144:VLlfWUVPqP+7lsonGVBDwiELWjgi6xtVEP0BvMUeJ/ONBGymI:VJf5SolsoGQiELWULjotVUPm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 374KB

file.exe

IMPHASH 78b36debb485b88b8de5929ea52f861d
SHA256 4ab13258167f4b6367b397e40405c0fee03cb634b38e6af80d7fc3f60a1e8ada
MD5 bc96776a325f5b76292e79be809f0725
SHA1 d80cc049d2af836ce5f034682df58bec6637688c
SHA512 478c00f1b0cdab38bfc9ad60aa936dfea4e5b8b8045c49b0b675fb46465802d849e1c69adcaf98b8df2505512b2696be427d68885066d654a8f73e9ce4596487
SSDEEP 6144:VLlfWUVPqP+7lsonGVBDwiELWjgi6xtVEP0BvMUeJ/ONBGymI:VJf5SolsoGQiELWULjotVUPm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16096

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileApisToOEM SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree LocalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA GetConsoleAliasesLengthA GetPrivateProfileIntA _lread SetVolumeMountPointW GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW SetLastError GetLogicalDrives EnumDateFormatsW OpenMutexW OpenJobObjectW LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId CloseHandle EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing