file[.]exe | Triage™

General

Target
file.exe
Size 288KB
Sample221230-v65fhsbc8y
SHA256 1d3c27912c2e71fe2c9c353abdbe8a4a9c76711f775dd7e5ff8e3badc2710247
MD5 8f97d0ee1866300ee0be19f77e43e042
SHA1 0964c2f37a1288ab02901fd5c24be4cbc106f5f7
SHA512 6ea49a24e6b7b2836719f22c21154641b0fd6c9e75e2948c60f59ba6637e515b39b8ca28ed77c3f1be7e5ac2c5638447b6cec6707f204f0efc9bae1584a2a5bd
SSDEEP 3072:ByzKEmL0T1LG7s3YM2RjaHkCvDffGzUg3E2szLU8y5/LU8y5sUv+si5HB6xuqqbZ:f/yLTYMHDDfuggU2szo5oGUvHiqx3E5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 288KB

file.exe

IMPHASH a21d2eccfaa9a9a6d2521527583d5034
SHA256 1d3c27912c2e71fe2c9c353abdbe8a4a9c76711f775dd7e5ff8e3badc2710247
MD5 8f97d0ee1866300ee0be19f77e43e042
SHA1 0964c2f37a1288ab02901fd5c24be4cbc106f5f7
SHA512 6ea49a24e6b7b2836719f22c21154641b0fd6c9e75e2948c60f59ba6637e515b39b8ca28ed77c3f1be7e5ac2c5638447b6cec6707f204f0efc9bae1584a2a5bd
SSDEEP 3072:ByzKEmL0T1LG7s3YM2RjaHkCvDffGzUg3E2szLU8y5/LU8y5sUv+si5HB6xuqqbZ:f/yLTYMHDDfuggU2szo5oGUvHiqx3E5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27792

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathA GetCommandLineA InterlockedExchange VerifyVersionInfoA CopyFileExA ConvertDefaultLocale FindNextFileA FindFirstVolumeA LocalShrink LocalFlags ExitThread FindResourceW SetFileTime InterlockedDecrement AddVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedIncrement GetModuleHandleA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle CreateFileA

user32

CharUpperBuffA

Sharing