file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221228-e24enacd9y
SHA256 d02fce287b406f117c0ace4a2137f949173a02c994de09f0ce9528009e5b74fb
MD5 d6a9a917d20f48903ee8d2983217eb1c
SHA1 cc82b80ea871b0087ab9a5f2b152045d8622e4dd
SHA512 b34dd9407ac3191580f5049d249c26acf86c96628af146eb55c3057a685932769378ae44a93bc5b0edd4c3629ba98ef6a528212aa5b9a9cf79c42e8c7f069171
SSDEEP 3072:5L6244QLgxax5I0f1Wq/rUZAh0jSyS2sOJRSMqgrIlPtYKs/xAI9y:y4QLg4E2QqDUZAh0pS25tI1YDZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 7c1d40e1afef147fd05f92e3dc1d4c1f
SHA256 d02fce287b406f117c0ace4a2137f949173a02c994de09f0ce9528009e5b74fb
MD5 d6a9a917d20f48903ee8d2983217eb1c
SHA1 cc82b80ea871b0087ab9a5f2b152045d8622e4dd
SHA512 b34dd9407ac3191580f5049d249c26acf86c96628af146eb55c3057a685932769378ae44a93bc5b0edd4c3629ba98ef6a528212aa5b9a9cf79c42e8c7f069171
SSDEEP 3072:5L6244QLgxax5I0f1Wq/rUZAh0jSyS2sOJRSMqgrIlPtYKs/xAI9y:y4QLg4E2QqDUZAh0pS25tI1YDZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW GetTickCount CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

InitiateSystemShutdownA

Sharing