file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221228-dk69jshc92
SHA256 1dc0bce733ec0d63a66bb5089e8ae109357f501ab3d65db266d3c12827a7fc4d
MD5 17fd5507664795f06961da9b17c38d77
SHA1 ac5b3a6a02e2f90370a365b215810c0aa0578cf8
SHA512 c6167264282ab18405e709d3bcfa633f48fd8724c2d3ba64ad8fe518d004ba6f3771aeba5ce18f538021dbfd7313199f6f42f87f5cb1adaa2a072393378cb055
SSDEEP 3072:7EXqq9LR3oT5MsSFITMTzoIuwy9sQxISMNVQuKf6PtYKs/xAI9y:W9LR4WyIoIaReNVQuC61YDZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 7c1d40e1afef147fd05f92e3dc1d4c1f
SHA256 1dc0bce733ec0d63a66bb5089e8ae109357f501ab3d65db266d3c12827a7fc4d
MD5 17fd5507664795f06961da9b17c38d77
SHA1 ac5b3a6a02e2f90370a365b215810c0aa0578cf8
SHA512 c6167264282ab18405e709d3bcfa633f48fd8724c2d3ba64ad8fe518d004ba6f3771aeba5ce18f538021dbfd7313199f6f42f87f5cb1adaa2a072393378cb055
SSDEEP 3072:7EXqq9LR3oT5MsSFITMTzoIuwy9sQxISMNVQuKf6PtYKs/xAI9y:W9LR4WyIoIaReNVQuC61YDZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW GetTickCount CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

InitiateSystemShutdownA

Sharing