file[.]exe | Triage™

General

Target
file.exe
Size 440KB
Sample221231-e5ynkscd6w
SHA256 35a343ff6cd574b86a00f9db497404eae972449448565f9d539bec673b97e776
MD5 c88f134ebe41dc23f72b9addd325a152
SHA1 8285fa026d00fa7745fd1a55b8c3cd858f199078
SHA512 769458898b04d24ac3ce58b118fdc7a9165bd041ee2b11a933e7807ee1d20fbcf893ea6e00b1db00f14048b33d80828cfddc1545026926397f90d6ce21e47b0b
SSDEEP 6144:xbXLwKmgsgIFk1bncEe4A8IXaBN/AsfpMPq8xBNZk8UIkEq:xbkKmYIFUcEFhIXaBN/5U7BfYI9q
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 440KB

file.exe

IMPHASH fa795f4b129006f1af6db3cbea43b4b6
SHA256 35a343ff6cd574b86a00f9db497404eae972449448565f9d539bec673b97e776
MD5 c88f134ebe41dc23f72b9addd325a152
SHA1 8285fa026d00fa7745fd1a55b8c3cd858f199078
SHA512 769458898b04d24ac3ce58b118fdc7a9165bd041ee2b11a933e7807ee1d20fbcf893ea6e00b1db00f14048b33d80828cfddc1545026926397f90d6ce21e47b0b
SSDEEP 6144:xbXLwKmgsgIFk1bncEe4A8IXaBN/AsfpMPq8xBNZk8UIkEq:xbkKmYIFUcEFhIXaBN/5U7BfYI9q
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27776

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA GetTempPathW GetSystemDirectoryW DisconnectNamedPipe OutputDebugStringA GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathW InterlockedExchange VerifyVersionInfoA CopyFileExA GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags ExitThread FindResourceW SetFileTime InterlockedCompareExchange RemoveVectoredExceptionHandler lstrcatA CreateActCtxA UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesW SetFileApisToOEM InterlockedIncrement GetModuleHandleA SetThreadAffinityMask InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle CreateFileA

user32

CharUpperBuffW

Sharing