file[.]exe | Triage™

General

Target
file.exe
Size 382KB
Sample221228-pp2qeade2v
SHA256 36a854876b78342f73cb65b505252e136c07834f09083b519fcb50a4ca08197a
MD5 a0413e2471b40d6eb42758ce1da93a0d
SHA1 6cd9ba4b8211343d3f15c8de0102e0c0f6e762ce
SHA512 7a8126b52478f51d842d21f63d699c72bbc95652c094661e72cf1eadf4943183937bad0b6ea5e02e368b78fe61dd06aaa77568789ac209a79eac3a9a03948efd
SSDEEP 6144:9fLqgMPXUzsYh+D8ThNj+mLWvovuAl/E27jiuVOvTFjN/tm1YDZ:Ndi4Rh+gTh++WugBN/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 382KB

file.exe

IMPHASH f5b79c73233da00116c4614291245728
SHA256 36a854876b78342f73cb65b505252e136c07834f09083b519fcb50a4ca08197a
MD5 a0413e2471b40d6eb42758ce1da93a0d
SHA1 6cd9ba4b8211343d3f15c8de0102e0c0f6e762ce
SHA512 7a8126b52478f51d842d21f63d699c72bbc95652c094661e72cf1eadf4943183937bad0b6ea5e02e368b78fe61dd06aaa77568789ac209a79eac3a9a03948efd
SSDEEP 6144:9fLqgMPXUzsYh+D8ThNj+mLWvovuAl/E27jiuVOvTFjN/tm1YDZ:Ndi4Rh+gTh++WugBN/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15577

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW GetCurrentActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW SetLastError CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

AbortSystemShutdownW

Sharing