file[.]exe | Triage™

General

Target
file.exe
Size 222KB
Sample221228-tcsdesag63
SHA256 f3307aed34b9d70b5c99f0e6a2d66b13b2fc132737c9fd0539ccd401d47bf905
MD5 e09ab4cf07a74b4ab1f0ccf3d5775fc6
SHA1 2b162adec94cdffa43e8a427bcc9bcce544d706e
SHA512 ac7ff7e998c246d4d8157d1c1d94b0ebf52daa8f0ec29d8e5929c68fea2b7ec206e51865102a7d9fa0be4195883bdff894ad29f349ef0ef1bffae1c55e9ece34
SSDEEP 3072:0ba6LJCdL55fgk1ct/m1wYyL99ORHSEgdxkN/2o/2mwD3tdmdhEH:0BLJCdLURO15yRwHS5xkBP/2mi3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 222KB

file.exe

IMPHASH fb6e1ecfdce764db4b1e699784e95013
SHA256 f3307aed34b9d70b5c99f0e6a2d66b13b2fc132737c9fd0539ccd401d47bf905
MD5 e09ab4cf07a74b4ab1f0ccf3d5775fc6
SHA1 2b162adec94cdffa43e8a427bcc9bcce544d706e
SHA512 ac7ff7e998c246d4d8157d1c1d94b0ebf52daa8f0ec29d8e5929c68fea2b7ec206e51865102a7d9fa0be4195883bdff894ad29f349ef0ef1bffae1c55e9ece34
SSDEEP 3072:0ba6LJCdL55fgk1ct/m1wYyL99ORHSEgdxkN/2o/2mwD3tdmdhEH:0BLJCdLURO15yRwHS5xkBP/2mi3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15082

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread FindResourceA SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetEndOfFile CreateActCtxA GlobalFindAtomW CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing