file[.]exe | Triage™

General

Target
file.exe
Size 230KB
Sample221228-rad2xadf2w
SHA256 5acaa02a304b39cef1b7725d70f07c5d0c0759bc810bbe423ddd00f39f64702c
MD5 6defe8e4c2b7693ed39419a575a7d42f
SHA1 1d4e35b0b97038c011bee7b9d0045a8f06775168
SHA512 f08b714947f9b3ab5ba7695df1ae7915990cc539c9678b2cf023d509e040e6ae721f0f68549fa7b3fc29d5ce9eaf389a5ba971ca35b2908d3e4ed90b0ee1c587
SSDEEP 3072:c0bLbvx5U1PPMIj74qZGq/c/BgdxfXz3wD3tdmdhEH:tLj2MIj0Qc/qx/ji3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH afeea56f0d60974ff405eae98c848b6b
SHA256 5acaa02a304b39cef1b7725d70f07c5d0c0759bc810bbe423ddd00f39f64702c
MD5 6defe8e4c2b7693ed39419a575a7d42f
SHA1 1d4e35b0b97038c011bee7b9d0045a8f06775168
SHA512 f08b714947f9b3ab5ba7695df1ae7915990cc539c9678b2cf023d509e040e6ae721f0f68549fa7b3fc29d5ce9eaf389a5ba971ca35b2908d3e4ed90b0ee1c587
SSDEEP 3072:c0bLbvx5U1PPMIj74qZGq/c/BgdxfXz3wD3tdmdhEH:tLj2MIj0Qc/qx/ji3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15433

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA GetBinaryTypeA SearchPathA GetCommandLineW InterlockedIncrement VerifyVersionInfoW ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread CreateActCtxA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexA GetCurrentActCtx GetDiskFreeSpaceW MoveFileA SetEvent MoveFileExW OpenMutexW FindResourceA SetFileTime AddVectoredExceptionHandler lstrcatA SetEndOfFile FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchangeAdd AreFileApisANSI GetModuleHandleW SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

CharUpperBuffA

Sharing