file[.]exe | Triage™

General

Target
file.exe
Size 295KB
Sample221231-lml1dshd79
SHA256 aa9ad8f31651f0ba745bf089cc71b29b33e40ff086cbead9f8c1ed82507fedb2
MD5 c879102fc414340426e6d589b661f601
SHA1 a1e4f20caf16716b6f8161d075e9b2d794fd79cc
SHA512 76c7aff0f890136f4953d929c0a381d7ef6ba70e8f896d49c12620cbf2342888e8ffec8a09255548cd12ef3d91c9a92bdec1207ecf5c5d9089c44b926c91e25e
SSDEEP 3072:xZ6q0BC4L9RncYOoRY+EshzMZCslXiAHsPmOHmq1mq+SU27hZYw8sS:569LncYSMoZCstwGdlyZYw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 295KB

file.exe

IMPHASH c6b5c4ce39dc8e9ce901a2ed52858f3a
SHA256 aa9ad8f31651f0ba745bf089cc71b29b33e40ff086cbead9f8c1ed82507fedb2
MD5 c879102fc414340426e6d589b661f601
SHA1 a1e4f20caf16716b6f8161d075e9b2d794fd79cc
SHA512 76c7aff0f890136f4953d929c0a381d7ef6ba70e8f896d49c12620cbf2342888e8ffec8a09255548cd12ef3d91c9a92bdec1207ecf5c5d9089c44b926c91e25e
SSDEEP 3072:xZ6q0BC4L9RncYOoRY+EshzMZCslXiAHsPmOHmq1mq+SU27hZYw8sS:569LncYSMoZCstwGdlyZYw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28320

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathW InterlockedExchange VerifyVersionInfoW CopyFileExW GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags GetModuleHandleA ExitThread FindResourceA SetFileTime InterlockedCompareExchange RemoveVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA SetFileApisToOEM InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle CreateFileA

user32

CharUpperBuffW

Sharing