file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221228-2fc2xaeh5s
SHA256 6e491f554bda7f87e1c557c137a85b64dbe3ba0acffd1ed3a9142e3dccb93a4c
MD5 17b69b868760aa487992a067a7147d09
SHA1 fecb31ae91ee9ce46fecda542adf9e26d1a875a3
SHA512 e23c90da0a370b0f6bd1c0078d429914ddb7e733134dc14c1249c31d2b1bbced6aa22ab79dc01af61d395c6006b87e72d456a6717c71d0b336470d92bbe14f37
SSDEEP 3072:G3SrL3gb5T94zXS/6blBIegvSfvzOgdxXQ2nwD3tdmdhxH:nrLQb4Ly6xW3SfLbxA2ni3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH a80d0dc9c10015fdaac0b0fe8d06a5a8
SHA256 6e491f554bda7f87e1c557c137a85b64dbe3ba0acffd1ed3a9142e3dccb93a4c
MD5 17b69b868760aa487992a067a7147d09
SHA1 fecb31ae91ee9ce46fecda542adf9e26d1a875a3
SHA512 e23c90da0a370b0f6bd1c0078d429914ddb7e733134dc14c1249c31d2b1bbced6aa22ab79dc01af61d395c6006b87e72d456a6717c71d0b336470d92bbe14f37
SSDEEP 3072:G3SrL3gb5T94zXS/6blBIegvSfvzOgdxXQ2nwD3tdmdhxH:nrLQb4Ly6xW3SfLbxA2ni3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15114

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing