file[.]exe | Triage™

General

Target
file.exe
Size 375KB
Sample221228-2fc2xabg85
SHA256 aecbffff87dde6250bbe37040f5aba94d7df62f94ef10f940ab022cf5dae38f4
MD5 295bf2db9ae3c0fae4cf1f4b8c80cb04
SHA1 69a7dac09aaf3803252bff2eb22bebc279b93f3c
SHA512 2616508da38f41a0a90a2efdacc469cc832c947eef2da76e36c863492b609ac43db6480094aa72190d293b9eca817dde5420d2119e7451e9ccae7af7d753c181
SSDEEP 6144:TLL5Vh/M194HohPl39ap6fVXcgIGDlkksgra6wExWsuvi3tm:TLDFM194Hf65pxDlkkr8KWsuvi3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 375KB

file.exe

IMPHASH a80d0dc9c10015fdaac0b0fe8d06a5a8
SHA256 aecbffff87dde6250bbe37040f5aba94d7df62f94ef10f940ab022cf5dae38f4
MD5 295bf2db9ae3c0fae4cf1f4b8c80cb04
SHA1 69a7dac09aaf3803252bff2eb22bebc279b93f3c
SHA512 2616508da38f41a0a90a2efdacc469cc832c947eef2da76e36c863492b609ac43db6480094aa72190d293b9eca817dde5420d2119e7451e9ccae7af7d753c181
SSDEEP 6144:TLL5Vh/M194HohPl39ap6fVXcgIGDlkksgra6wExWsuvi3tm:TLDFM194Hf65pxDlkkr8KWsuvi3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15114

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing