file[.]exe | Triage™

General

Target
file.exe
Size 245KB
Sample221229-cplb7sfc2s
SHA256 6d38e4cfb9a6226b56b66e889245cbe00f95cbe3733b6d29f9b9934c7c183bf4
MD5 6e3f084aba75c775358f6fb235787770
SHA1 a45ef3f14e0515c71fd7963b9a1eff2401668420
SHA512 5fa951160aee0a92a18600fc13945a5107624a90cdf3c88605767ecc1025ab8d10f3672b3360767aae44493f1f63dffe42194b367aa5088069f557395eb790c8
SSDEEP 3072:ZfdLfBC5MbecxTfRRJ6jduEFL/ebtPvVwwDDtdmdhmUXG83H:XLf7ewR+gE9WVwiDtmmUXT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 245KB

file.exe

IMPHASH bbf36ced96a22e93b70f34963639ae52
SHA256 6d38e4cfb9a6226b56b66e889245cbe00f95cbe3733b6d29f9b9934c7c183bf4
MD5 6e3f084aba75c775358f6fb235787770
SHA1 a45ef3f14e0515c71fd7963b9a1eff2401668420
SHA512 5fa951160aee0a92a18600fc13945a5107624a90cdf3c88605767ecc1025ab8d10f3672b3360767aae44493f1f63dffe42194b367aa5088069f557395eb790c8
SSDEEP 3072:ZfdLfBC5MbecxTfRRJ6jduEFL/ebtPvVwwDDtdmdhmUXG83H:XLf7ewR+gE9WVwiDtmmUXT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW GetVolumeInformationW InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing