file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample221230-jcc9dsfb68
SHA256 ee2b8e861b9b55428d9e877f09be20ec266a089df2fcd3db55514095e061373c
MD5 a34e775a2b39f7f0330658169d704d9b
SHA1 905048cf139ba64b3cb19d52b29e64d434d980da
SHA512 6498dda3321a9ba9fb61b764ba0aa59ca4618c5aed74fc808e084cd9a1d8c337d5475e4e21630ec8c2ad4c6accedaf830cf7ecf27ef8835e34f99db482ed4c68
SSDEEP 6144:D9OL2ro//I1yCHdkWRlqX35IcixC5bTOyo5olZx3E5:5O6U//I1yadk4qX35IvAL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH a9adfb14cea5eb2af1047020faa6cb65
SHA256 ee2b8e861b9b55428d9e877f09be20ec266a089df2fcd3db55514095e061373c
MD5 a34e775a2b39f7f0330658169d704d9b
SHA1 905048cf139ba64b3cb19d52b29e64d434d980da
SHA512 6498dda3321a9ba9fb61b764ba0aa59ca4618c5aed74fc808e084cd9a1d8c337d5475e4e21630ec8c2ad4c6accedaf830cf7ecf27ef8835e34f99db482ed4c68
SSDEEP 6144:D9OL2ro//I1yCHdkWRlqX35IcixC5bTOyo5olZx3E5:5O6U//I1yadk4qX35IvAL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14857

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement InterlockedExchange VerifyVersionInfoA CopyFileExW ConvertDefaultLocale InterlockedCompareExchange FindNextFileW FindFirstVolumeA LocalFree LocalFlags ExitThread FindResourceW SetFileTime AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedDecrement HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperBuffA

Sharing