file[.]exe | Triage™

General

Target
file.exe
Size 402KB
Sample221230-pp2qeafe89
SHA256 7d9dfdbe451d7bda9c0ae9f2623797ef472a2a5a57de06e2d1b55e61da5332b7
MD5 95e81b89886885f1da093383f86d4dd3
SHA1 7c87a76fe9908421a590e9e7e4fcd618eba4361b
SHA512 352de9cb919c69c92b928b9bdcfa34b2c6300d15aeca6d16a0d25f898074ae49d6b8b279587b277ca258295f6fdab3cc93a9c89abb3f4c1b2db81398354d7756
SSDEEP 6144:0dvLWxzGZ20IMRZgzvSYnBiyEwaKaZp3o5ot+ox3E5:0dvqzGZ9NZgzKYQ1waP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 402KB

file.exe

IMPHASH f750a700d11610fb5e6c41c7c40fe15c
SHA256 7d9dfdbe451d7bda9c0ae9f2623797ef472a2a5a57de06e2d1b55e61da5332b7
MD5 95e81b89886885f1da093383f86d4dd3
SHA1 7c87a76fe9908421a590e9e7e4fcd618eba4361b
SHA512 352de9cb919c69c92b928b9bdcfa34b2c6300d15aeca6d16a0d25f898074ae49d6b8b279587b277ca258295f6fdab3cc93a9c89abb3f4c1b2db81398354d7756
SSDEEP 6144:0dvLWxzGZ20IMRZgzvSYnBiyEwaKaZp3o5ot+ox3E5:0dvqzGZ9NZgzKYQ1waP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25362

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasW GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathA GetCommandLineA InterlockedIncrement InterlockedExchange VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileW FindFirstVolumeA LocalFree LocalFlags ExitThread FindResourceW SetFileTime AddVectoredExceptionHandler lstrcatA CreateActCtxW GlobalFindAtomA CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

Sharing