file[.]exe | Triage™

General

Target
file.exe
Size 221KB
Sample221225-l7cx8aee31
SHA256 b8e04892b1115677a4ae47a0dc3c981d1dea93041c14eab7dee1dcbeeb93cd23
MD5 66be86586e83d6501d51de5b7fdb0f2f
SHA1 95761b3b652a6b7117551e5bdd9a8a9f04d96dd0
SHA512 b7d201497c36b65a1845b0caa2dcc237069b6b12fe22e9877a8a0f257fb4c6fc3614f49a7c1177d1c15a23aa41b4a73c04a0cfad30d2b43be1d318f29ebbbbf2
SSDEEP 6144:4LhRezK6um7f1KUshAnKl3KSJ/TJmGymI:4++6um7fcUshAc3KSVTwm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 221KB

file.exe

IMPHASH 7b9daca6da068f54ad4e1900288e8efd
SHA256 b8e04892b1115677a4ae47a0dc3c981d1dea93041c14eab7dee1dcbeeb93cd23
MD5 66be86586e83d6501d51de5b7fdb0f2f
SHA1 95761b3b652a6b7117551e5bdd9a8a9f04d96dd0
SHA512 b7d201497c36b65a1845b0caa2dcc237069b6b12fe22e9877a8a0f257fb4c6fc3614f49a7c1177d1c15a23aa41b4a73c04a0cfad30d2b43be1d318f29ebbbbf2
SSDEEP 6144:4LhRezK6um7f1KUshAnKl3KSJ/TJmGymI:4++6um7fcUshAc3KSVTwm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15613

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileApisToOEM SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree LocalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA GetConsoleAliasesLengthA GetPrivateProfileIntA _lread SetVolumeMountPointW EnumResourceLanguagesW LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW SetLastError GetLogicalDrives EnumDateFormatsW OpenMutexW OpenJobObjectW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing