file[.]exe | Triage™

General

Target
file.exe
Size 396KB
Sample221229-at3e6sfb21
SHA256 98dd2729411f006f5a3f28906466159cc45b25b0aa9e43abe9246ef73ccdde31
MD5 7c402f6618a2b8cf1c13cecf74589b28
SHA1 0f0c84d11ff924cb253d1bd662687a59c19202f6
SHA512 d6a57abdc1c961a71cdd159d75aa9a708596a4212534eab81a777a7f6856a1b3c1df0ed33b8f4d0d2db71ab0b17d9ca1978071d08ba3dfaea963dbf8a85f4c62
SSDEEP 6144:/L+3jM824Qd5yZ4Gn2STj5oAUbHX09YcSnMuiDtmmUXT:/KwZnySIY3NcSn5iDtmtT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 396KB

file.exe

IMPHASH bbf36ced96a22e93b70f34963639ae52
SHA256 98dd2729411f006f5a3f28906466159cc45b25b0aa9e43abe9246ef73ccdde31
MD5 7c402f6618a2b8cf1c13cecf74589b28
SHA1 0f0c84d11ff924cb253d1bd662687a59c19202f6
SHA512 d6a57abdc1c961a71cdd159d75aa9a708596a4212534eab81a777a7f6856a1b3c1df0ed33b8f4d0d2db71ab0b17d9ca1978071d08ba3dfaea963dbf8a85f4c62
SSDEEP 6144:/L+3jM824Qd5yZ4Gn2STj5oAUbHX09YcSnMuiDtmmUXT:/KwZnySIY3NcSn5iDtmtT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW GetVolumeInformationW InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing