file[.]exe | Triage™

General

Target
file.exe
Size 231KB
Sample221228-e5yzcahd89
SHA256 feaa238faf10f307c8ea8c736c755af838b3bcc270bcd66bcbd6ea4c4a2ba11b
MD5 ebcabf8d6703fff03a87a17d6530eb14
SHA1 e53d18771a0891ff04b8417edb23afb4a8ef98e6
SHA512 2fd6d6f45d47fec010785ccb9eb1b8570b54d12f4eaf6d08222661e8012b388e6dfb67779389fae6f0583fe5f2df1257910bf49e0abfe11b2215b6b1b4eb01a6
SSDEEP 3072:HUXvIVLlgBm55Y+HnllbWuKg0tXHGdMnSMmJb7HVlkYPtYKs/xAI9y:BVLlg48+HbbWucY2mJbRln1YDZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 231KB

file.exe

IMPHASH 7c1d40e1afef147fd05f92e3dc1d4c1f
SHA256 feaa238faf10f307c8ea8c736c755af838b3bcc270bcd66bcbd6ea4c4a2ba11b
MD5 ebcabf8d6703fff03a87a17d6530eb14
SHA1 e53d18771a0891ff04b8417edb23afb4a8ef98e6
SHA512 2fd6d6f45d47fec010785ccb9eb1b8570b54d12f4eaf6d08222661e8012b388e6dfb67779389fae6f0583fe5f2df1257910bf49e0abfe11b2215b6b1b4eb01a6
SSDEEP 3072:HUXvIVLlgBm55Y+HnllbWuKg0tXHGdMnSMmJb7HVlkYPtYKs/xAI9y:BVLlg48+HbbWucY2mJbRln1YDZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW GetTickCount CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

InitiateSystemShutdownA

Sharing