file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221228-ebmn8acd6t
SHA256 3fcc1c73374a24575a62aae4a42befd9150bbfc34c5b9fbbfd15cdcc3af93347
MD5 7028a5ec09d6327af636dc9f028029e6
SHA1 b1d58953da963f5b1cd7d26a53927ac1efc4ff91
SHA512 6ad3ff0a93c14ef06500c44e790aea2d476f73812de5fb9e38c8d2e188fb8a26bc435cba7154fe9ef754d95d237b8dc8de5daa365aee5e914c453e0c0ec4f61a
SSDEEP 3072:RHsj50L2WgF57MM4Gi+sVwqEGNk4joiTm1FODBoySM740i6cPtYKs/xAI9y:U0L2PjMMZUVwFSJTmqWu7Ni6c1YDZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 7c1d40e1afef147fd05f92e3dc1d4c1f
SHA256 3fcc1c73374a24575a62aae4a42befd9150bbfc34c5b9fbbfd15cdcc3af93347
MD5 7028a5ec09d6327af636dc9f028029e6
SHA1 b1d58953da963f5b1cd7d26a53927ac1efc4ff91
SHA512 6ad3ff0a93c14ef06500c44e790aea2d476f73812de5fb9e38c8d2e188fb8a26bc435cba7154fe9ef754d95d237b8dc8de5daa365aee5e914c453e0c0ec4f61a
SSDEEP 3072:RHsj50L2WgF57MM4Gi+sVwqEGNk4joiTm1FODBoySM740i6cPtYKs/xAI9y:U0L2PjMMZUVwFSJTmqWu7Ni6c1YDZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15705

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW GetTickCount CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

InitiateSystemShutdownA

Sharing