file[.]exe | Triage™

General

Target
file.exe
Size 234KB
Sample221230-mdm2rsaf6v
SHA256 9283abb7dcb337dc3df7c06f3e6ffbe2eb207329a8a4a17cbb93ec051fd0fc94
MD5 92925b71810b10d1b46388d15612e65f
SHA1 c017b3accecb0630af863b1b5109f7e832f8898e
SHA512 1f39393b3552947dc9e77e6c07353e66ee48a04a4f8ca92758fbb83e8c8260554cef0a689a7d449a67605be7ad469d2d36e7a5747caf449d0c4a074dfd90d0c5
SSDEEP 3072:ESFL7pLROVM3CnQUzPLNLU8y5/LU8y5k7XUlB6xuqqb53y1teM:tL7pcsSPpo5oK7EOx3E5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 234KB

file.exe

IMPHASH a9adfb14cea5eb2af1047020faa6cb65
SHA256 9283abb7dcb337dc3df7c06f3e6ffbe2eb207329a8a4a17cbb93ec051fd0fc94
MD5 92925b71810b10d1b46388d15612e65f
SHA1 c017b3accecb0630af863b1b5109f7e832f8898e
SHA512 1f39393b3552947dc9e77e6c07353e66ee48a04a4f8ca92758fbb83e8c8260554cef0a689a7d449a67605be7ad469d2d36e7a5747caf449d0c4a074dfd90d0c5
SSDEEP 3072:ESFL7pLROVM3CnQUzPLNLU8y5/LU8y5k7XUlB6xuqqb53y1teM:tL7pcsSPpo5oK7EOx3E5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14857

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW GetBinaryTypeW SearchPathA GetCommandLineA InterlockedIncrement InterlockedExchange VerifyVersionInfoA CopyFileExW ConvertDefaultLocale InterlockedCompareExchange FindNextFileW FindFirstVolumeA LocalFree LocalFlags ExitThread FindResourceW SetFileTime AddVectoredExceptionHandler lstrcatA SetFilePointer CreateActCtxA GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedDecrement HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperBuffA

Sharing