file[.]exe | Triage™

General

Target
file.exe
Size 229KB
Sample221228-prrm8ade2y
SHA256 a07f2a53cf8e208ef68560bb5c2f77a1cdcd1b774696a44756bdbbcf9dd7a9b3
MD5 53d7bd80132deb16b891f947a8c47085
SHA1 6a42fb3990100bc008d85bbd0c5ae63bced720b1
SHA512 774b9c58bc78db3c90287106d859c9d566896d5a5b86d2ca2414b31a90de64d451b5118b972fb1c928d6e25b8a18db6d215a427805f8dfbcb92370eb30bd4a66
SSDEEP 3072:Z9CNLh1fK45Da1PKWQLD95SLxq1qZSMJGYAPtYKs/xAI99:EL3CTP8Lh4LxwqlMj1YDZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH f5b79c73233da00116c4614291245728
SHA256 a07f2a53cf8e208ef68560bb5c2f77a1cdcd1b774696a44756bdbbcf9dd7a9b3
MD5 53d7bd80132deb16b891f947a8c47085
SHA1 6a42fb3990100bc008d85bbd0c5ae63bced720b1
SHA512 774b9c58bc78db3c90287106d859c9d566896d5a5b86d2ca2414b31a90de64d451b5118b972fb1c928d6e25b8a18db6d215a427805f8dfbcb92370eb30bd4a66
SSDEEP 3072:Z9CNLh1fK45Da1PKWQLD95SLxq1qZSMJGYAPtYKs/xAI99:EL3CTP8Lh4LxwqlMj1YDZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15577

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryA CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA GetBinaryTypeA SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread CreateActCtxA GlobalFindAtomW GetConsoleAliasW VerSetConditionMask CreateMutexW GetCurrentActCtx GetDiskFreeSpaceA MoveFileW SetEvent MoveFileExW OpenMutexA FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW SetLastError CopyFileW LoadLibraryA HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

AbortSystemShutdownW

Sharing