file[.]exe | Triage™

General

Target
file.exe
Size 345KB
Sample221226-lcf2dscg28
SHA256 3f577a96247e908ae5812fc07c3fea0673ff0f5ca47c0bdaf74920ae849d4147
MD5 b1440fcc0a482459d0f01dec71a89cd7
SHA1 e09f64550bece475a89fdd93451e2bcae9c635af
SHA512 484e440fb38b7dd5117c52cd59544a148063cc6a5a4c81429c8ba4b37f0715ada1c6e844d3159b8bb30edf17554e6c82a0f436d6ecc81371e94e2455b1be8dcd
SSDEEP 6144:1LvPCilj4/W/Y87NSJ8kA6ZsfHtK88xWybIr:1Ljj4t870j1ZsfQ8r
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 345KB

file.exe

IMPHASH ef7d669516b298c4e8cdfd574cf5e6dc
SHA256 3f577a96247e908ae5812fc07c3fea0673ff0f5ca47c0bdaf74920ae849d4147
MD5 b1440fcc0a482459d0f01dec71a89cd7
SHA1 e09f64550bece475a89fdd93451e2bcae9c635af
SHA512 484e440fb38b7dd5117c52cd59544a148063cc6a5a4c81429c8ba4b37f0715ada1c6e844d3159b8bb30edf17554e6c82a0f436d6ecc81371e94e2455b1be8dcd
SSDEEP 6144:1LvPCilj4/W/Y87NSJ8kA6ZsfHtK88xWybIr:1Ljj4t870j1ZsfQ8r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14836

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AreFileApisANSI SetHandleCount GetProcessPriorityBoost GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree GlobalFlags ReadConsoleOutputA ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW GetConsoleAliasA OpenJobObjectW GetPrivateProfileIntA _lread SetVolumeMountPointA EnumResourceLanguagesW LoadModule lstrlenW CreateDirectoryW GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW SetLastError EnumDateFormatsW OpenMutexW CreateActCtxA LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownA

Sharing