file[.]exe | Triage™

General

Target
file.exe
Size 221KB
Sample221225-lhl5labd32
SHA256 486624a5f6154e96cf6ffdf8e52101e07527bd6488ccbc2f5af860e1d080ce3d
MD5 0832c102331af5307c561a5dba7380a5
SHA1 e5ad2eecf7dab71f9d55a28e9594d78d10dbfbbf
SHA512 d7de631a3cd107366a6536af0f3c20a8cfff24fc8a5d0803ff818e9091095738eeaa171a14317e352b528c801b51f607747fe667f7ec0b813ad333fce5024e46
SSDEEP 6144:ZCLKRHtwBivIQHzYgtsRvMlGJ/X1hGymI:ZCgt5HjcvM4VXlm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 221KB

file.exe

IMPHASH 7b9daca6da068f54ad4e1900288e8efd
SHA256 486624a5f6154e96cf6ffdf8e52101e07527bd6488ccbc2f5af860e1d080ce3d
MD5 0832c102331af5307c561a5dba7380a5
SHA1 e5ad2eecf7dab71f9d55a28e9594d78d10dbfbbf
SHA512 d7de631a3cd107366a6536af0f3c20a8cfff24fc8a5d0803ff818e9091095738eeaa171a14317e352b528c801b51f607747fe667f7ec0b813ad333fce5024e46
SSDEEP 6144:ZCLKRHtwBivIQHzYgtsRvMlGJ/X1hGymI:ZCgt5HjcvM4VXlm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15613

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileApisToOEM SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree LocalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA GetConsoleAliasesLengthA GetPrivateProfileIntA _lread SetVolumeMountPointW EnumResourceLanguagesW LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW SetLastError GetLogicalDrives EnumDateFormatsW OpenMutexW OpenJobObjectW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing