file[.]exe | Triage™

General

Target
file.exe
Size 244KB
Sample221229-dkl9dafc6v
SHA256 c7d099ca217b9c3044493d120669e69b1941fd1a722eb7eb4d164dd162f53a16
MD5 777c5805f498b02630a2e93bcceb7e16
SHA1 03bf7cdc9743b3b6304f5d097e72734c8bf9981f
SHA512 beb53ef0f0a06dd1499bb9d2b60eddaf4b519fcb4d28c8c2df4de904c9555f246b15237ba26158317c3b9e52a3d75630913f3e84848c0be74b9df63a53da9f82
SSDEEP 3072:OfKLyu5F4bBtk8h5hjKvFOCBuo7veOL2fawDDtdmdhmUXG83H:DLy+4bBtbwPV791iDtmmUXT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 244KB

file.exe

IMPHASH bbf36ced96a22e93b70f34963639ae52
SHA256 c7d099ca217b9c3044493d120669e69b1941fd1a722eb7eb4d164dd162f53a16
MD5 777c5805f498b02630a2e93bcceb7e16
SHA1 03bf7cdc9743b3b6304f5d097e72734c8bf9981f
SHA512 beb53ef0f0a06dd1499bb9d2b60eddaf4b519fcb4d28c8c2df4de904c9555f246b15237ba26158317c3b9e52a3d75630913f3e84848c0be74b9df63a53da9f82
SSDEEP 3072:OfKLyu5F4bBtk8h5hjKvFOCBuo7veOL2fawDDtdmdhmUXG83H:DLy+4bBtbwPV791iDtmmUXT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW GetVolumeInformationW InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing