file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221226-ybvvdagh21
SHA256 4cfb19df7d72e6c76385bac2e9aa0bee1490bfa25f5ada420079ebf207824183
MD5 aecf866e0355d5fad385f4fa2f94462e
SHA1 eff52ebf7186a17bbf7a60f2405809cdb16e10bf
SHA512 4866e2b67dd25dc02a6530e6f32b4495cbf29e23aa4b9afe4965c9fa98091861165da45bbaac3d880c532cf080536bdab868dbe499e053eebd50ccecd979c053
SSDEEP 3072:H2X4LcjC85ZVBEaBSz/IR7WjLptW4JF+V+Y700:hLcjV54z/IAHWOF+Vl7l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 1ddc7148f458b790d7ad3f29826eef5c
SHA256 4cfb19df7d72e6c76385bac2e9aa0bee1490bfa25f5ada420079ebf207824183
MD5 aecf866e0355d5fad385f4fa2f94462e
SHA1 eff52ebf7186a17bbf7a60f2405809cdb16e10bf
SHA512 4866e2b67dd25dc02a6530e6f32b4495cbf29e23aa4b9afe4965c9fa98091861165da45bbaac3d880c532cf080536bdab868dbe499e053eebd50ccecd979c053
SSDEEP 3072:H2X4LcjC85ZVBEaBSz/IR7WjLptW4JF+V+Y700:hLcjV54z/IAHWOF+Vl7l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14212

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW CallNamedPipeW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineA InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeA LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW CopyFileW VerSetConditionMask GetConsoleAliasA DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetConsoleMode lstrcatA SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange AreFileApisANSI InterlockedExchangeAdd GetModuleHandleW GetTickCount CreateMutexW LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

CharToOemBuffW

advapi32

InitiateSystemShutdownA

Sharing