file[.]exe | Triage™

General

Target
file.exe
Size 288KB
Sample221231-amrp4acb2x
SHA256 597c80d652bd2faa4f62b5747eb3e4d92ef7745682f6a362e15c0c96486e088b
MD5 1934f1cbe76246d87b6ce6ee7b850f22
SHA1 b7361f2b697d863d306017a2e3f4b70aec8c5d33
SHA512 32df53d47aa997a3a3265a13a59880a3065a6d52ee0fab51480bf5f34b62d5ed690598648cf12287c3da5829b331df31732b68b1b3478d1afecdc5abc7d623c6
SSDEEP 3072:yLY6Wv96HLLrXBOobQlRq65HViygWjlM4v3h5/i/8gLgCol+8U9SkEqwi:tzvErL1OobQW651ioju450kDE8UIkEq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 288KB

file.exe

IMPHASH fa795f4b129006f1af6db3cbea43b4b6
SHA256 597c80d652bd2faa4f62b5747eb3e4d92ef7745682f6a362e15c0c96486e088b
MD5 1934f1cbe76246d87b6ce6ee7b850f22
SHA1 b7361f2b697d863d306017a2e3f4b70aec8c5d33
SHA512 32df53d47aa997a3a3265a13a59880a3065a6d52ee0fab51480bf5f34b62d5ed690598648cf12287c3da5829b331df31732b68b1b3478d1afecdc5abc7d623c6
SSDEEP 3072:yLY6Wv96HLLrXBOobQlRq65HViygWjlM4v3h5/i/8gLgCol+8U9SkEqwi:tzvErL1OobQW651ioju450kDE8UIkEq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27776

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringA GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathW InterlockedExchange VerifyVersionInfoA CopyFileExA GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange RemoveVectoredExceptionHandler lstrcatA CreateActCtxA UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesW SetFileApisToOEM InterlockedIncrement GetModuleHandleA SetThreadAffinityMask InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle CreateFileA

user32

CharUpperBuffW

Sharing