file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221226-sma2fsda96
SHA256 2db84c3d283054dec73ac46c52bccef3dd5a4df953502fad6547167436647208
MD5 b1d72cb41723b5d210b8c7184ea11008
SHA1 87e691ecfe5bfb4c624d1868c28f69768e681843
SHA512 a59b4aaeaca258b723b63e73f73a19bb77ac2f47dd5960146086f1dc3e54ef5eda9a74e201bb708b9024a0256e4f174bb0286b4724e04a0439e07fa3dbfba43a
SSDEEP 3072:lBAsQHL0vAX5FBnpTJisUbp2EHQf9ifzjLpt9MHU+y+V+Y700:8LVRnpQsUbEm6SXH94U+y+Vl7l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 3d514dbfa495ef23a57cf082b72217e7
SHA256 2db84c3d283054dec73ac46c52bccef3dd5a4df953502fad6547167436647208
MD5 b1d72cb41723b5d210b8c7184ea11008
SHA1 87e691ecfe5bfb4c624d1868c28f69768e681843
SHA512 a59b4aaeaca258b723b63e73f73a19bb77ac2f47dd5960146086f1dc3e54ef5eda9a74e201bb708b9024a0256e4f174bb0286b4724e04a0439e07fa3dbfba43a
SSDEEP 3072:lBAsQHL0vAX5FBnpTJisUbp2EHQf9ifzjLpt9MHU+y+V+Y700:8LVRnpQsUbEm6SXH94U+y+Vl7l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14564

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetHandleCount GetProcessPriorityBoost GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointW AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress GetModuleHandleA LocalAlloc GetCommandLineA InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeA LocalFree AreFileApisANSI ReadConsoleOutputA ExitProcess BuildCommDCBAndTimeoutsW CreateActCtxA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd SetLastError EnumDateFormatsW GetConsoleAliasA GlobalFlags LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownA

Sharing