file[.]exe | Triage™

General

Target
file.exe
Size 300KB
Sample221229-at3e6sca75
SHA256 b3f0f7a4e82ca5428630483ed701ccb0acda8bb279d7d0f6772bdec88e25e909
MD5 dabe5c9d3111e558200ae0f98932d543
SHA1 e988b82f9936e9aec8b9409d075b6454a38db388
SHA512 f6da0332b1721842c9e76b0807f2d6a0ae797303ecf03c049ea00661c7b907e1be129ec2537180a46b3ec91f42bcbc6c04ea424e3adfc4e04251aade11a67c8e
SSDEEP 3072:iv1LWG5jehfkyTZHel8MYDMYb768aAlHKSADqum+A/0ea37ABwDDtdmdhmUXG83H:YLWtky1HACb1HKpDqubA/O0iDtmmUXT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 300KB

file.exe

IMPHASH bbf36ced96a22e93b70f34963639ae52
SHA256 b3f0f7a4e82ca5428630483ed701ccb0acda8bb279d7d0f6772bdec88e25e909
MD5 dabe5c9d3111e558200ae0f98932d543
SHA1 e988b82f9936e9aec8b9409d075b6454a38db388
SHA512 f6da0332b1721842c9e76b0807f2d6a0ae797303ecf03c049ea00661c7b907e1be129ec2537180a46b3ec91f42bcbc6c04ea424e3adfc4e04251aade11a67c8e
SSDEEP 3072:iv1LWG5jehfkyTZHel8MYDMYb768aAlHKSADqum+A/0ea37ABwDDtdmdhmUXG83H:YLWtky1HACb1HKpDqubA/O0iDtmmUXT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15146

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW GetVolumeInformationW InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing