file[.]exe | Triage™

General

Target
file.exe
Size 402KB
Sample221230-mljdjsfd84
SHA256 89f7caab7c7299de8004cf0791d8fca2f916009eaae276e81a62c2fa0b81fa79
MD5 a0c2e138f87df36837844e9a023856b9
SHA1 c8637f820705842c02d488b6d6d09d74fe149bc8
SHA512 9080706953cba8c4ad652d7fd8fd649eed6c0d1f6f655427ec13fc6ceacc7f0ad9dd7f6838b4818c2f1f874fa2314979bdafb99a7731a894663018f988178fe0
SSDEEP 12288:u8NNl72DKx3HCwtrNWNMuYMviMxTi9F3:u8FCK3EeAviMEF3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 402KB

file.exe

IMPHASH f750a700d11610fb5e6c41c7c40fe15c
SHA256 89f7caab7c7299de8004cf0791d8fca2f916009eaae276e81a62c2fa0b81fa79
MD5 a0c2e138f87df36837844e9a023856b9
SHA1 c8637f820705842c02d488b6d6d09d74fe149bc8
SHA512 9080706953cba8c4ad652d7fd8fd649eed6c0d1f6f655427ec13fc6ceacc7f0ad9dd7f6838b4818c2f1f874fa2314979bdafb99a7731a894663018f988178fe0
SSDEEP 12288:u8NNl72DKx3HCwtrNWNMuYMviMxTi9F3:u8FCK3EeAviMEF3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25362

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathA GetCommandLineA InterlockedIncrement InterlockedExchange VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree LocalFlags ExitThread FindResourceW SetFileTime AddVectoredExceptionHandler lstrcatA CreateActCtxW GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

Sharing