file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221226-vppczadb97
SHA256 ba284bb55453961eb1a49fedebce1fe6259abefb73ccf51c210b528d3de0234c
MD5 bfb23816abc335bd5298d567c82a2f14
SHA1 d55c84109c268af84a10e88875ec98c0338dc951
SHA512 d8a0a58a468ac7e292d2885387b14ea0486f12ca0467690e717e4402e50e21f284c3c4667847fe0af90c26b3897177ebddc1bd8d97cb70f0b4dfafbbef2ccb69
SSDEEP 3072:191GnL52fsvihBj5GCTXlSLjhxogX/DunNx6fKtKgjLptTmllUFw6pI+V+Y700:InL52fsv6yCBS0gix6sHsl1+I+Vl7l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 982bd02849c11c69cd88bfed6c82cdbc
SHA256 ba284bb55453961eb1a49fedebce1fe6259abefb73ccf51c210b528d3de0234c
MD5 bfb23816abc335bd5298d567c82a2f14
SHA1 d55c84109c268af84a10e88875ec98c0338dc951
SHA512 d8a0a58a468ac7e292d2885387b14ea0486f12ca0467690e717e4402e50e21f284c3c4667847fe0af90c26b3897177ebddc1bd8d97cb70f0b4dfafbbef2ccb69
SSDEEP 3072:191GnL52fsvihBj5GCTXlSLjhxogX/DunNx6fKtKgjLptTmllUFw6pI+V+Y700:InL52fsv6yCBS0gix6sHsl1+I+Vl7l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14164

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW CallNamedPipeW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineA InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeA LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW CopyFileW GetConsoleAliasA CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange AreFileApisANSI InterlockedExchangeAdd GetModuleHandleW GetTickCount VerSetConditionMask LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

CharToOemBuffW

advapi32

InitiateSystemShutdownA

Sharing