file[.]exe | Triage™

General

Target
file.exe
Size 232KB
Sample221226-kep7eacf43
SHA256 3fa43bda493149cd6e7ed44336894a92d3d3aec034cc12184bb13f6e8aedfbb3
MD5 d693f42f4c145eedc8a1408fcd1c3d2a
SHA1 edb102d725dd67c0fadeb7327a4da8701e5e036b
SHA512 4b763adf0e69ecdc9787ee463b54ccb992bdc668416dd3c0e52925e71b69c907a52f7b257be986207099ae3f5924464c19bb15d2c9cc69c1d3be84da02241abc
SSDEEP 3072:RPGFgvLDuL5QwYF4lclrvmgeWFBM3mklS1g/tK8AhmsLrcSb54VIcVTuh:HvLKaJvtLBMWqtK8A3bIr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 232KB

file.exe

IMPHASH 6a8f260c43148885d76dffe1ee7a8503
SHA256 3fa43bda493149cd6e7ed44336894a92d3d3aec034cc12184bb13f6e8aedfbb3
MD5 d693f42f4c145eedc8a1408fcd1c3d2a
SHA1 edb102d725dd67c0fadeb7327a4da8701e5e036b
SHA512 4b763adf0e69ecdc9787ee463b54ccb992bdc668416dd3c0e52925e71b69c907a52f7b257be986207099ae3f5924464c19bb15d2c9cc69c1d3be84da02241abc
SSDEEP 3072:RPGFgvLDuL5QwYF4lclrvmgeWFBM3mklS1g/tK8AhmsLrcSb54VIcVTuh:HvLKaJvtLBMWqtK8A3bIr
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16676

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AreFileApisANSI SetHandleCount GetProcessPriorityBoost GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree GlobalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA OpenJobObjectW GetConsoleAliasA _lread SetVolumeMountPointA EnumResourceLanguagesW LoadModule lstrlenW CreateDirectoryW GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA InterlockedCompareExchange FreeEnvironmentStringsA InterlockedExchangeAdd GetModuleHandleW SetLastError GetLogicalDrives EnumDateFormatsW OpenMutexW GetPrivateProfileIntA LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

DrawCaption

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownA

Sharing