file[.]exe | Triage™

General

Target
file.exe
Size 300KB
Sample221229-c35yrscb89
SHA256 bf1e6bbfa8c3819c2f04adc4289490758cf970f095dd93404405e0cd4e47f809
MD5 8b52a648ad93ce656937ca53af834340
SHA1 0cd27f03c54aebf64ed1212b22cb4617b46d9613
SHA512 4c5a8cb06a7f8fd1bbd600d3648c0079f212446b82f94026fd06fed60b50d695a380b702175af4e4191bd23928f69de8ea51a92fef1971a18fdc4a5840e8ae7d
SSDEEP 6144:9L33gvd1KVoX51PhdSt5nIrcOWo9CTqxrjiDtmmUXT:9Lgv7Kip1PhdSt5IIu98qViDtmtT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 300KB

file.exe

IMPHASH bbf36ced96a22e93b70f34963639ae52
SHA256 bf1e6bbfa8c3819c2f04adc4289490758cf970f095dd93404405e0cd4e47f809
MD5 8b52a648ad93ce656937ca53af834340
SHA1 0cd27f03c54aebf64ed1212b22cb4617b46d9613
SHA512 4c5a8cb06a7f8fd1bbd600d3648c0079f212446b82f94026fd06fed60b50d695a380b702175af4e4191bd23928f69de8ea51a92fef1971a18fdc4a5840e8ae7d
SSDEEP 6144:9L33gvd1KVoX51PhdSt5nIrcOWo9CTqxrjiDtmmUXT:9Lgv7Kip1PhdSt5IIu98qViDtmtT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW GetVolumeInformationW InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing