file[.]exe | Triage™

General

Target
file.exe
Size 403KB
Sample221230-qsdcnaah6s
SHA256 525cf158c70af5f91b2d6fe0018c06e9dadbe4d17e77dc7a6ed01ea891820a8f
MD5 223ea67c1fb3f04cb93819cb6f551e3a
SHA1 9472d182d3336be78e35e7812ca36f6c5dbd9311
SHA512 1596efb86150acfd9154cf240fecf232fa1c2e352de9ce7975f5cd7e6b052a6814fafbeab6b2d68c4fdd77958eff21890bab2afb284da8f560a05cbb697ab827
SSDEEP 6144:H9XZL+0PzCI92zryqQS9QE9Atc1vaF9W67/AX7ZC4Fo5oyROsx3E5:H9XZvD9tqQS9QE+q1uxEX705r
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 403KB

file.exe

IMPHASH a0afb0bb18f93fec919d8262e76eb850
SHA256 525cf158c70af5f91b2d6fe0018c06e9dadbe4d17e77dc7a6ed01ea891820a8f
MD5 223ea67c1fb3f04cb93819cb6f551e3a
SHA1 9472d182d3336be78e35e7812ca36f6c5dbd9311
SHA512 1596efb86150acfd9154cf240fecf232fa1c2e352de9ce7975f5cd7e6b052a6814fafbeab6b2d68c4fdd77958eff21890bab2afb284da8f560a05cbb697ab827
SSDEEP 6144:H9XZL+0PzCI92zryqQS9QE9Atc1vaF9W67/AX7ZC4Fo5oyROsx3E5:H9XZvD9tqQS9QE+q1uxEX705r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25362

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathA GetCommandLineA InterlockedIncrement InterlockedExchange VerifyVersionInfoA CopyFileExW ConvertDefaultLocale FindNextFileA FindFirstVolumeA LocalFree LocalFlags ExitThread FindResourceW SetFileTime AddVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

Sharing