file[.]exe | Triage™

General

Target
file.exe
Size 296KB
Sample221231-pp2qeahe96
SHA256 30aeeacbd04e10dba0247f3cb3a703e3de33e65c4b59f0bffc30f2281d4e7878
MD5 56d74ad08d538f93d8753d801563960b
SHA1 9bbdb892c6ece110984f9cdedaf291930d948189
SHA512 4a31fe92fd491f8bcc2dc3bd16518bf302de1a975179c9ccd4533fbc1ca0771ffcbc5ffa975d814f6af3ddc420f0ae7f88392df976df43cbddbb7ae36e25d5db
SSDEEP 6144:0NEDLXQo5OgupFjfO2or1aMmrkfmd2ZYw:0sLQo5OhW1Dm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 296KB

file.exe

IMPHASH c6b5c4ce39dc8e9ce901a2ed52858f3a
SHA256 30aeeacbd04e10dba0247f3cb3a703e3de33e65c4b59f0bffc30f2281d4e7878
MD5 56d74ad08d538f93d8753d801563960b
SHA1 9bbdb892c6ece110984f9cdedaf291930d948189
SHA512 4a31fe92fd491f8bcc2dc3bd16518bf302de1a975179c9ccd4533fbc1ca0771ffcbc5ffa975d814f6af3ddc420f0ae7f88392df976df43cbddbb7ae36e25d5db
SSDEEP 6144:0NEDLXQo5OgupFjfO2or1aMmrkfmd2ZYw:0sLQo5OhW1Dm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28320

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA AddConsoleAliasA GetConsoleAliasW GetModuleHandleW CreateDirectoryExA ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc MoveFileWithProgressA SearchPathW InterlockedExchange VerifyVersionInfoW CopyFileExW GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags GetModuleHandleA ExitThread FindResourceA SetFileTime InterlockedCompareExchange RemoveVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA SetFileApisToOEM InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CloseHandle CreateFileA

user32

CharUpperBuffW

Sharing