file[.]exe | Triage™

General

Target
file.exe
Size 231KB
Sample221225-rf4jrabf28
SHA256 e99c244d18109241d4d06fd116eb651b1fb9eb06208eace3326cdf8d64098815
MD5 58d30432c0fdf70860dea2caa7fccdd0
SHA1 fc853b8f999e88774644bc1a927c44d4f984fba4
SHA512 90ccc468fb023206e526948ca327ae856f1032972724f9cb992f2bdd209dab85d63784eb9996d7732ee865f74beaa41a5b69ef16a87d37f71d9b7929b06d1794
SSDEEP 3072:OXAFZLTFo5aLGhQG+BEH6hGcBBTxmdZftJ/41whPhhw7RkxmJZs:OkZLJ9LUfah7+ZVJ/41irGymI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 231KB

file.exe

IMPHASH 8514760d95d5a493235b8748f65885e5
SHA256 e99c244d18109241d4d06fd116eb651b1fb9eb06208eace3326cdf8d64098815
MD5 58d30432c0fdf70860dea2caa7fccdd0
SHA1 fc853b8f999e88774644bc1a927c44d4f984fba4
SHA512 90ccc468fb023206e526948ca327ae856f1032972724f9cb992f2bdd209dab85d63784eb9996d7732ee865f74beaa41a5b69ef16a87d37f71d9b7929b06d1794
SSDEEP 3072:OXAFZLTFo5aLGhQG+BEH6hGcBBTxmdZftJ/41whPhhw7RkxmJZs:OkZLJ9LUfah7+ZVJ/41irGymI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15293

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileApisToOEM SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree LocalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA GetConsoleAliasesLengthA GetPrivateProfileIntA _lread SetVolumeMountPointW EnumResourceLanguagesW LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW SetLastError GetLogicalDrives EnumDateFormatsW OpenMutexA OpenJobObjectW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA

user32

DrawCaption

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownW

Sharing