file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample221229-fejbmsfd61
SHA256 59bb9cb2e2303067e37fbe85becdf96f81ceef791356da211e877a62295cb890
MD5 f5af08280daf5e2361557111f9a42949
SHA1 88736bf48a823138d50b1395c8bdb874bc35d045
SHA512 d8bfec17bece8aff6038d793a03bc703be7ac4df90ac7f1449a14c9f0d1a5abf992d7fc032667ca81774ca99a2660ba0e7d6b110f00f4c9a06ce3dd5f0195df5
SSDEEP 3072:QPHtLGls5SVgDScCKxV1u2/kSS+m0j36x9eTAfHFTwIbxM2ECeG7h18wDDtdmdhB:GL2Fqhdf+0j3xcRxM2EM18iDtmmUXT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH bbf36ced96a22e93b70f34963639ae52
SHA256 59bb9cb2e2303067e37fbe85becdf96f81ceef791356da211e877a62295cb890
MD5 f5af08280daf5e2361557111f9a42949
SHA1 88736bf48a823138d50b1395c8bdb874bc35d045
SHA512 d8bfec17bece8aff6038d793a03bc703be7ac4df90ac7f1449a14c9f0d1a5abf992d7fc032667ca81774ca99a2660ba0e7d6b110f00f4c9a06ce3dd5f0195df5
SSDEEP 3072:QPHtLGls5SVgDScCKxV1u2/kSS+m0j36x9eTAfHFTwIbxM2ECeG7h18wDDtdmdhB:GL2Fqhdf+0j3xcRxM2EM18iDtmmUXT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree GlobalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW GetVolumeInformationW InterlockedExchangeAdd SetLastError HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffA

Sharing