file[.]exe | Triage™

General

Target
file.exe
Size 422KB
Sample221231-pp2qeach2w
SHA256 c57785442ed6e7870b3b749cf54e5d9ccc6fbf5887264fa9743447ac119a8776
MD5 fd40f4922f918fad0fa6dfdb179d9084
SHA1 15c057ae60beb3818ad97c08bcdcd71a60c5be2f
SHA512 98d069a57ece2b3e10b7a764033e2d81611c9b9767bf5da87c9cd0ee7854071a087552c0653c69ebecbfbf03e615584e0746023d651649491e142be25b0df6ee
SSDEEP 6144:g2UrL91ydzmY5MP9cNT/Sm6DZGQ/mrBRxyPqnI8Sid/YWZYw:g2UrB1yQY5MlA/SPD00CDyynVg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 422KB

file.exe

IMPHASH a8a37b9dbba75dee024eac98b7bda623
SHA256 c57785442ed6e7870b3b749cf54e5d9ccc6fbf5887264fa9743447ac119a8776
MD5 fd40f4922f918fad0fa6dfdb179d9084
SHA1 15c057ae60beb3818ad97c08bcdcd71a60c5be2f
SHA512 98d069a57ece2b3e10b7a764033e2d81611c9b9767bf5da87c9cd0ee7854071a087552c0653c69ebecbfbf03e615584e0746023d651649491e142be25b0df6ee
SSDEEP 6144:g2UrL91ydzmY5MP9cNT/Sm6DZGQ/mrBRxyPqnI8Sid/YWZYw:g2UrB1yQY5MlA/SPD00CDyynVg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26407

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathW InterlockedExchange VerifyVersionInfoW CopyFileExW GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags GetModuleHandleA ExitThread FindResourceA SetFileTime InterlockedCompareExchange RemoveVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA SetFileApisToOEM InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

user32

CharUpperBuffW

Sharing