file[.]exe | Triage™

General

Target
file.exe
Size 244KB
Sample221229-eagrkscc54
SHA256 548a6e79139fcf29792a3d9cc96be2dfee8b0ee7e8f81884009cacc0d8853065
MD5 0d97f6b5af597b3abd9e9461fe969c2f
SHA1 6818de52d6b54c699d5551db7306b99709c9f410
SHA512 d6b6d47d0930dc4f92a478b59b7f991ff8eef6d28e621f6efd0462f2f1a494f0479c4d7acabc6fd4dcf684ed200b96d29ca3eb6c139d194f88daf7664153a456
SSDEEP 3072:I36L345r7q1VUODhtYNRYsLCkKLOn/eTFUPIL54wDDtdmdhmUXG83H:VL3uLOd0LAs5iDtmmUXT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 244KB

file.exe

IMPHASH bbf36ced96a22e93b70f34963639ae52
SHA256 548a6e79139fcf29792a3d9cc96be2dfee8b0ee7e8f81884009cacc0d8853065
MD5 0d97f6b5af597b3abd9e9461fe969c2f
SHA1 6818de52d6b54c699d5551db7306b99709c9f410
SHA512 d6b6d47d0930dc4f92a478b59b7f991ff8eef6d28e621f6efd0462f2f1a494f0479c4d7acabc6fd4dcf684ed200b96d29ca3eb6c139d194f88daf7664153a456
SSDEEP 3072:I36L345r7q1VUODhtYNRYsLCkKLOn/eTFUPIL54wDDtdmdhmUXG83H:VL3uLOd0LAs5iDtmmUXT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW GetVolumeInformationW InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing