file[.]exe | Triage™

General

Target
file.exe
Size 223KB
Sample221228-w2ly2sbb49
SHA256 0be273870adac8df4e556a11bdee5b31615908b330c36740c110d2e1f00ae4c3
MD5 4e2be1a3b5bf2db2d7ac1ab4fbc0780f
SHA1 205871d5e95167d5ec32a389284775bf638e7474
SHA512 c4eaec5a5cf2944fb634d62904394a92680ae2f2ec2b611277cd720abcf01789dc78b081f967022761370ae27c83ce88f561b27335f0d1d1b51e349006080411
SSDEEP 3072:avy9Lfs5l4ew5qSlBnxoZyMvf9dGOn7gdxnAN+fYcwD3tdmdhEH:fLfEK1kyMPnUxANU9i3tm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 223KB

file.exe

IMPHASH fb6e1ecfdce764db4b1e699784e95013
SHA256 0be273870adac8df4e556a11bdee5b31615908b330c36740c110d2e1f00ae4c3
MD5 4e2be1a3b5bf2db2d7ac1ab4fbc0780f
SHA1 205871d5e95167d5ec32a389284775bf638e7474
SHA512 c4eaec5a5cf2944fb634d62904394a92680ae2f2ec2b611277cd720abcf01789dc78b081f967022761370ae27c83ce88f561b27335f0d1d1b51e349006080411
SSDEEP 3072:avy9Lfs5l4ew5qSlBnxoZyMvf9dGOn7gdxnAN+fYcwD3tdmdhEH:fLfEK1kyMPnUxANU9i3tm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15114

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasW GetModuleHandleA CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputW GetTempPathW GetSystemDirectoryW CreateMailslotW OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA ConvertDefaultLocale FindNextFileW FindFirstVolumeW LocalFree GlobalFlags ExitThread FindResourceA SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetEndOfFile CreateActCtxA GlobalFindAtomW CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW AreFileApisANSI InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing