file[.]exe | Triage™

General

Target
file.exe
Size 441KB
Sample221230-x8cvdsbf4y
SHA256 e406efaa0f70b29f4c8b18a064aba2ebfe642903dc09148e2b879bad3aca4e39
MD5 6b1a4c9b424c38a265b0f9cdda0002ee
SHA1 92accceaac462d191845a3f6961f0f5806ed07f8
SHA512 30d99a750183e4f27a53602a67c93db95901388608f6fcb385a6e2e771938784c097e53f462772cd35254fca2c6775fa396e91190596455865e885f3259cd143
SSDEEP 6144:SkHLjV2Lm0Y5SMO8RkdUAlSiVMa3uLV1qahE9Awo5ot74Gx3E5:SOkLmVVRaUOV213SKY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 441KB

file.exe

IMPHASH a21d2eccfaa9a9a6d2521527583d5034
SHA256 e406efaa0f70b29f4c8b18a064aba2ebfe642903dc09148e2b879bad3aca4e39
MD5 6b1a4c9b424c38a265b0f9cdda0002ee
SHA1 92accceaac462d191845a3f6961f0f5806ed07f8
SHA512 30d99a750183e4f27a53602a67c93db95901388608f6fcb385a6e2e771938784c097e53f462772cd35254fca2c6775fa396e91190596455865e885f3259cd143
SSDEEP 6144:SkHLjV2Lm0Y5SMO8RkdUAlSiVMa3uLV1qahE9Awo5ot74Gx3E5:SOkLmVVRaUOV213SKY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27792

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathA GetCommandLineA InterlockedExchange VerifyVersionInfoA CopyFileExA ConvertDefaultLocale FindNextFileA FindFirstVolumeA LocalShrink LocalFlags ExitThread FindResourceW SetFileTime InterlockedDecrement AddVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileA FreeEnvironmentStringsW EnumResourceLanguagesW GetVolumeInformationW InterlockedIncrement GetModuleHandleA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle CreateFileA

user32

CharUpperBuffA

Sharing