file[.]exe | Triage™

General

Target
file.exe
Size 244KB
Sample221229-enhwsscc76
SHA256 d963efb79f2127cd6e5f7d4d3f072d2b240542b5317e21edb9f871bbe4a36a72
MD5 4078d737c6d4666c7098fab29d4da7ed
SHA1 1cb5367993076acb35ee081f7d1215f0861cffd9
SHA512 3370bc1e0fe5578ee71e13e9acd547643e0bbba9d52b6fdc3988f08f2228aa39fa97d67b649e85f6fe7c2051c54b8547147370ec66c087801d1abb719d1ac33e
SSDEEP 3072:vr0EELSqq5EmFYw0+hnzc2Iklv+qeO0wjRnJPte8yeQhGywDDtdmdhmUXG83H:fELSUX+1zc1OLZjdJPkLiDtmmUXT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 244KB

file.exe

IMPHASH bbf36ced96a22e93b70f34963639ae52
SHA256 d963efb79f2127cd6e5f7d4d3f072d2b240542b5317e21edb9f871bbe4a36a72
MD5 4078d737c6d4666c7098fab29d4da7ed
SHA1 1cb5367993076acb35ee081f7d1215f0861cffd9
SHA512 3370bc1e0fe5578ee71e13e9acd547643e0bbba9d52b6fdc3988f08f2228aa39fa97d67b649e85f6fe7c2051c54b8547147370ec66c087801d1abb719d1ac33e
SSDEEP 3072:vr0EELSqq5EmFYw0+hnzc2Iklv+qeO0wjRnJPte8yeQhGywDDtdmdhmUXG83H:fELSUX+1zc1OLZjdJPkLiDtmmUXT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW GetVolumeInformationW InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing