file[.]exe | Triage™

General

Target
file.exe
Size 375KB
Sample221228-1dl2csbf64
SHA256 fc6899f44cb279a2ff7561a58c426966010a16413d6af06b414f6f6fd66ca296
MD5 060d08508412490710e6760c0371bf34
SHA1 cb14f21f8137b9547ffc87e53f69ed0cb68d79a8
SHA512 11871913e8f4227f03e8ad2a132576fbc6c6d1cbd103cf0e413577b496981e747faf54cad38c25b896180f6328395fbc1bbb2b2adb977982427b3fae7e2137fc
SSDEEP 6144:mLAn2sAEkcKt/qrCHkyFBTuoko4ehke26SLyxF+aiq8xVECi3tm:mEn5UcKtCe3FB6or3hke2bTaJCdi3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 375KB

file.exe

IMPHASH a80d0dc9c10015fdaac0b0fe8d06a5a8
SHA256 fc6899f44cb279a2ff7561a58c426966010a16413d6af06b414f6f6fd66ca296
MD5 060d08508412490710e6760c0371bf34
SHA1 cb14f21f8137b9547ffc87e53f69ed0cb68d79a8
SHA512 11871913e8f4227f03e8ad2a132576fbc6c6d1cbd103cf0e413577b496981e747faf54cad38c25b896180f6328395fbc1bbb2b2adb977982427b3fae7e2137fc
SSDEEP 6144:mLAn2sAEkcKt/qrCHkyFBTuoko4ehke26SLyxF+aiq8xVECi3tm:mEn5UcKtCe3FB6or3hke2bTaJCdi3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing