file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221226-s5w2msdb37
SHA256 cb5f108c7fc8db9970b8df084fc4bea81c2492e99a3f89e874e54658e99b170d
MD5 552eaf1b8e30f91b835908ede784a758
SHA1 18260d8e07f6bd74a43a855f60f39f3523f8aef9
SHA512 80d008b9e877ed83553a5770871ce7a876d9f636aa0da6e9c822ade5bf33298966184c55d083e72b42510f2543c4f6aea0302688b3e4a200dc33e79de99d09bd
SSDEEP 3072:odcOJLaz5BPlImzSvkh7W+fSfnKPuB2m7DkCfjLptXQEVg5U+V+Y700:wLadImzSgW+IKoZJ7Hlg5U+Vl7l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 9e625a9baa60a24433313f8e16d3b887
SHA256 cb5f108c7fc8db9970b8df084fc4bea81c2492e99a3f89e874e54658e99b170d
MD5 552eaf1b8e30f91b835908ede784a758
SHA1 18260d8e07f6bd74a43a855f60f39f3523f8aef9
SHA512 80d008b9e877ed83553a5770871ce7a876d9f636aa0da6e9c822ade5bf33298966184c55d083e72b42510f2543c4f6aea0302688b3e4a200dc33e79de99d09bd
SSDEEP 3072:odcOJLaz5BPlImzSvkh7W+fSfnKPuB2m7DkCfjLptXQEVg5U+V+Y700:wLadImzSgW+IKoZJ7Hlg5U+Vl7l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14564

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA AreFileApisANSI SetHandleCount GetProcessPriorityBoost GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointW AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress GetModuleHandleA LocalAlloc GetCommandLineA InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeA LocalFree EnumDateFormatsW ReadConsoleOutputA ExitProcess BuildCommDCBAndTimeoutsW CreateActCtxA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd GetTickCount GlobalFlags LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

CharToOemBuffW

advapi32

InitiateSystemShutdownA

Sharing