file[.]exe | Triage™

General

Target
file.exe
Size 382KB
Sample221228-dj2bxacd2s
SHA256 b256ffb2eb04c05fe05ba919bea6cb54738b8a5b7cd62984f8ca3524104f07e8
MD5 f26efec17a6f64cf64f6a41635897cab
SHA1 bcff41bff2cf6fe6d28b6c9f8217c32d4b6f8652
SHA512 71cf6fad9f7966f4bbf7d0309c14dcbe2e50db7107ac819a8a5b63ca6e6f576fa4bba13cd0994b949f135697588f0e70a2814076f3f7397d4d46c3ef6bedae15
SSDEEP 6144:MBLZpoj1ImCx4drNguJ+XIu+NcpOvueQjAfU7esSKQm8/QS1YDZ:unoWZoNguwXFQcpOoA2eHKQ5/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 382KB

file.exe

IMPHASH 7c1d40e1afef147fd05f92e3dc1d4c1f
SHA256 b256ffb2eb04c05fe05ba919bea6cb54738b8a5b7cd62984f8ca3524104f07e8
MD5 f26efec17a6f64cf64f6a41635897cab
SHA1 bcff41bff2cf6fe6d28b6c9f8217c32d4b6f8652
SHA512 71cf6fad9f7966f4bbf7d0309c14dcbe2e50db7107ac819a8a5b63ca6e6f576fa4bba13cd0994b949f135697588f0e70a2814076f3f7397d4d46c3ef6bedae15
SSDEEP 6144:MBLZpoj1ImCx4drNguJ+XIu+NcpOvueQjAfU7esSKQm8/QS1YDZ:unoWZoNguwXFQcpOoA2eHKQ5/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW GetTickCount CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

InitiateSystemShutdownA

Sharing