file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221230-ke97ksfc46
SHA256 a4222ea2dec639a850eff45a80cea109bc4469c5c9173e44e1c0e3a1707c8bbb
MD5 d0abdbcc68e4be1f27d0bc5f8479ca26
SHA1 8687c79586ebfc56f807aed6fa840a127bfe7b76
SHA512 0bbe69234700ae985ba0461820eb02f275e9f539dcaa526ea6d2fb10640ff25de2e5e8640467ebd5fd454ec0ab58e42bd953adbf304a81e493c14cbab89bf6cf
SSDEEP 3072:8EdLUNR7PfqK6X/gql7gyyhuHnLU8y5/LU8y5lMeB6xuqqb53y1teM:TLUnqXAlCo5ovOx3E5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH a9adfb14cea5eb2af1047020faa6cb65
SHA256 a4222ea2dec639a850eff45a80cea109bc4469c5c9173e44e1c0e3a1707c8bbb
MD5 d0abdbcc68e4be1f27d0bc5f8479ca26
SHA1 8687c79586ebfc56f807aed6fa840a127bfe7b76
SHA512 0bbe69234700ae985ba0461820eb02f275e9f539dcaa526ea6d2fb10640ff25de2e5e8640467ebd5fd454ec0ab58e42bd953adbf304a81e493c14cbab89bf6cf
SSDEEP 3072:8EdLUNR7PfqK6X/gql7gyyhuHnLU8y5/LU8y5lMeB6xuqqb53y1teM:TLUnqXAlCo5ovOx3E5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14857

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement InterlockedExchange VerifyVersionInfoA CopyFileExW ConvertDefaultLocale InterlockedCompareExchange FindNextFileW FindFirstVolumeA LocalFree LocalFlags ExitThread FindResourceW SetFileTime AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedDecrement HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperBuffA

Sharing