file[.]exe | Triage™

General

Target
file.exe
Size 449KB
Sample221231-n7fp8ahe75
SHA256 c139970fa446bf6ec136cb1417fdc9a6d586e8ed8a9180c493f6b47bcae38efd
MD5 81d5a3f72e98114fe65e16a8a83aa791
SHA1 0c7a25fc9d5f66e46a1d84586d77e8a969906cfb
SHA512 28b5036c2e815e6f7638b5a2df8b1cb90d554477287758437dc9abb2d3f2adac693a92185b9f697e72c20a9452bed8d5756dfcfe517806cd0a445e75cdcbcc38
SSDEEP 6144:PBErL8VVVKt0RmSI4AACuPX9F1lzRCln2MmRf6gAlNxasW87VdsQuZYw:PB2GVVp6KXl0ARcAu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 449KB

file.exe

IMPHASH c6b5c4ce39dc8e9ce901a2ed52858f3a
SHA256 c139970fa446bf6ec136cb1417fdc9a6d586e8ed8a9180c493f6b47bcae38efd
MD5 81d5a3f72e98114fe65e16a8a83aa791
SHA1 0c7a25fc9d5f66e46a1d84586d77e8a969906cfb
SHA512 28b5036c2e815e6f7638b5a2df8b1cb90d554477287758437dc9abb2d3f2adac693a92185b9f697e72c20a9452bed8d5756dfcfe517806cd0a445e75cdcbcc38
SSDEEP 6144:PBErL8VVVKt0RmSI4AACuPX9F1lzRCln2MmRf6gAlNxasW87VdsQuZYw:PB2GVVp6KXl0ARcAu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28320

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathW InterlockedExchange VerifyVersionInfoW CopyFileExW GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags GetModuleHandleA ExitThread FindResourceA SetFileTime InterlockedCompareExchange RemoveVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA SetFileApisToOEM InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle CreateFileA

user32

CharUpperBuffW

Sharing