file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221227-d4ryzaeb85
SHA256 2fdf03da8f711985ce2760d13f039e2a0a503409d3a44d1bfd21be7dd669971b
MD5 1cc3dc84ea02e884fc08a4716a508f50
SHA1 7f6994a568b8350f5543a74403969a2884aac2f1
SHA512 50ff59493fa3d929a441d38ca9c3f093a3755dbe072f789eab71ea151b5b2153745f3cf5e088c428839be318a2e0f0d56e5f1ed8fb1de3c3359d67655bf677c6
SSDEEP 3072:DkStJLDS5g9/dI5h7C6DlqJk2skO7rw7SM4mdj2wPtYKs/xAI9h:HLD65BC4AG26rw34q2w1YDZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 770342bbcc7220bf3afa71cf90800857
SHA256 2fdf03da8f711985ce2760d13f039e2a0a503409d3a44d1bfd21be7dd669971b
MD5 1cc3dc84ea02e884fc08a4716a508f50
SHA1 7f6994a568b8350f5543a74403969a2884aac2f1
SHA512 50ff59493fa3d929a441d38ca9c3f093a3755dbe072f789eab71ea151b5b2153745f3cf5e088c428839be318a2e0f0d56e5f1ed8fb1de3c3359d67655bf677c6
SSDEEP 3072:DkStJLDS5g9/dI5h7C6DlqJk2skO7rw7SM4mdj2wPtYKs/xAI9h:HLD65BC4AG26rw34q2w1YDZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14580

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW CallNamedPipeW GetSystemDirectoryA CreateMailslotW TlsSetValue GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindFirstVolumeW LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW GetConsoleAliasA VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime lstrcatA SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange SetConsoleMode InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW GetTickCount CopyFileW LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

CharUpperBuffA

advapi32

InitiateSystemShutdownA

Sharing