file[.]exe | Triage™

General

Target
file.exe
Size 383KB
Sample221228-lhmfcsab25
SHA256 ae009d97763d64b3ccc2dfe89bf6c443fb530025ec54f2f0035e16c119aa02dd
MD5 d503fec76f98bd13501aaa71ce3bb3ee
SHA1 a0763b6408d8907b1e711da091065e2914b5e29f
SHA512 d58d1fdab9aa807c527fd977c33825bcec9ac47ba83d53d5d474ac25aa1d9a50404757a9cbf37986cf3fb52a7107f58a7000036fc913389b4c27a40cdeab8692
SSDEEP 6144:uLS/OdqYWexhBRn8XFdZcmUBS6kGZ5Jg8JfPiF+w8DVUf+uO1YDZ:umRYWeLnl6H8JH48JUfz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 383KB

file.exe

IMPHASH 0fa74203434ad90f458c139675b74f88
SHA256 ae009d97763d64b3ccc2dfe89bf6c443fb530025ec54f2f0035e16c119aa02dd
MD5 d503fec76f98bd13501aaa71ce3bb3ee
SHA1 a0763b6408d8907b1e711da091065e2914b5e29f
SHA512 d58d1fdab9aa807c527fd977c33825bcec9ac47ba83d53d5d474ac25aa1d9a50404757a9cbf37986cf3fb52a7107f58a7000036fc913389b4c27a40cdeab8692
SSDEEP 6144:uLS/OdqYWexhBRn8XFdZcmUBS6kGZ5Jg8JfPiF+w8DVUf+uO1YDZ:umRYWeLnl6H8JH48JUfz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15577

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW SetLastError CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

AbortSystemShutdownW

Sharing