file[.]exe | Triage™

General

Target
file.exe
Size 381KB
Sample221227-ek8caaec37
SHA256 061478475e80e5e11f4ae65b2c3e45c6c1a779a76e2f2afd5643f95252ed735f
MD5 b91116910510eac8c4f6e7ac0be7a3b0
SHA1 8f0e498786624d2ba772f8716e8fedb827312aa1
SHA512 df0265be3b940ed0e5da8b649445f665ad17e5200865f616e824ed7a92dd6fb189deb1d83b993b5d3db7a979517132a3321f6358341a34a32d5769c36e4eb2d5
SSDEEP 6144:qLGRnqfmMpXH9OM+gbGGYC7eLaH40MeMl7COD7LCP4baD1YDZ:qSRnU/H9OM7bG3CRBMeMdnDPiMa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 381KB

file.exe

IMPHASH 770342bbcc7220bf3afa71cf90800857
SHA256 061478475e80e5e11f4ae65b2c3e45c6c1a779a76e2f2afd5643f95252ed735f
MD5 b91116910510eac8c4f6e7ac0be7a3b0
SHA1 8f0e498786624d2ba772f8716e8fedb827312aa1
SHA512 df0265be3b940ed0e5da8b649445f665ad17e5200865f616e824ed7a92dd6fb189deb1d83b993b5d3db7a979517132a3321f6358341a34a32d5769c36e4eb2d5
SSDEEP 6144:qLGRnqfmMpXH9OM+gbGGYC7eLaH40MeMl7COD7LCP4baD1YDZ:qSRnU/H9OM7bG3CRBMeMdnDPiMa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14564

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW CallNamedPipeW GetSystemDirectoryA CreateMailslotW TlsSetValue GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindFirstVolumeW LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW GetConsoleAliasA VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime lstrcatA SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange SetConsoleMode InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW GetTickCount CopyFileW LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

CharUpperBuffA

advapi32

InitiateSystemShutdownA

Sharing