file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221228-lhmfcsab24
SHA256 d234fdbf8baa194fb95b2cdd07bf8ff607e029b8d5340b8752a51201af3dcaba
MD5 cb74ca10b81d6187cbd7ab013a388075
SHA1 2c3153bd0efcfeba6f74b5ffd346bf3c66f98b63
SHA512 c328f7a39bc60f538e08af4d60f48577b3b4b03c07246ccb6fcfb1af0cbf35517359c8caf4a5c06a8ec8ad59c67f92496112077d5bbd9679a9ef1ae93106aaa3
SSDEEP 3072:VabYLz3C1N5dFbpZQfyyMeAAh9sSMhBEZdfPtYKs/xAI9F:PLzSH9r4yreAAohS7f1YDZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH 0fa74203434ad90f458c139675b74f88
SHA256 d234fdbf8baa194fb95b2cdd07bf8ff607e029b8d5340b8752a51201af3dcaba
MD5 cb74ca10b81d6187cbd7ab013a388075
SHA1 2c3153bd0efcfeba6f74b5ffd346bf3c66f98b63
SHA512 c328f7a39bc60f538e08af4d60f48577b3b4b03c07246ccb6fcfb1af0cbf35517359c8caf4a5c06a8ec8ad59c67f92496112077d5bbd9679a9ef1ae93106aaa3
SSDEEP 3072:VabYLz3C1N5dFbpZQfyyMeAAh9sSMhBEZdfPtYKs/xAI9F:PLzSH9r4yreAAohS7f1YDZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15577

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW SetLastError CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

AbortSystemShutdownW

Sharing