file[.]exe | Triage™

General

Target
file.exe
Size 278KB
Sample221228-29pmssfa3x
SHA256 33bcc15e4ecc3736ec7ee300097e8a90db00fe94b07b5fd00324470e0d86f017
MD5 4234a2e3038d87ddf5e9e7f0a5a716c6
SHA1 cc4a5b31feffeb236267679c5de68b968a936d7a
SHA512 5db33087d598db25d6d909450582164f682c34e7f1015a4339a8ff674ecb2536231e7ef97e5f6d9f932102438e2580d501ed338040b6e982362eca06908cb063
SSDEEP 6144:NLHksj6MmMEfkUYJt6ejGWGbRrxhDZ0DGi3tm:NzksjSMEs7zGWGbRNlGDGi3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 278KB

file.exe

IMPHASH a80d0dc9c10015fdaac0b0fe8d06a5a8
SHA256 33bcc15e4ecc3736ec7ee300097e8a90db00fe94b07b5fd00324470e0d86f017
MD5 4234a2e3038d87ddf5e9e7f0a5a716c6
SHA1 cc4a5b31feffeb236267679c5de68b968a936d7a
SHA512 5db33087d598db25d6d909450582164f682c34e7f1015a4339a8ff674ecb2536231e7ef97e5f6d9f932102438e2580d501ed338040b6e982362eca06908cb063
SSDEEP 6144:NLHksj6MmMEfkUYJt6ejGWGbRrxhDZ0DGi3tm:NzksjSMEs7zGWGbRNlGDGi3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15114

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing