file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221226-tym1tsgc9w
SHA256 0867564e29cd82ac704cfd76788eb93bb08898ea101f06b19f77fee27d0e1bc1
MD5 3eef9058b0842b5d9737eacce8e7840c
SHA1 162091fd14336e261fce1166127ccf2a9a4f4a72
SHA512 b479d01072b1c53295d1cfff395389f5228d8e21e552ca22e7cc1316749cfc9111e7306d55f84b3287e3bb7b0e880695e0c60e2d56cf07d472276ee62b1570df
SSDEEP 3072:UX4q0T9Lb85Kz5FiGikjD3ljdvljLpt/7Hf+V+Y700:xLbnlFiLkjD3lxpHbf+Vl7l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 9e625a9baa60a24433313f8e16d3b887
SHA256 0867564e29cd82ac704cfd76788eb93bb08898ea101f06b19f77fee27d0e1bc1
MD5 3eef9058b0842b5d9737eacce8e7840c
SHA1 162091fd14336e261fce1166127ccf2a9a4f4a72
SHA512 b479d01072b1c53295d1cfff395389f5228d8e21e552ca22e7cc1316749cfc9111e7306d55f84b3287e3bb7b0e880695e0c60e2d56cf07d472276ee62b1570df
SSDEEP 3072:UX4q0T9Lb85Kz5FiGikjD3ljdvljLpt/7Hf+V+Y700:xLbnlFiLkjD3lxpHbf+Vl7l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14564

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA AreFileApisANSI SetHandleCount GetProcessPriorityBoost GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW FindNextVolumeMountPointW AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress GetModuleHandleA LocalAlloc GetCommandLineA InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeA LocalFree EnumDateFormatsW ReadConsoleOutputA ExitProcess BuildCommDCBAndTimeoutsW CreateActCtxA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd GetTickCount GlobalFlags LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

CharToOemBuffW

advapi32

InitiateSystemShutdownA

Sharing