file[.]exe | Triage™

General

Target
file.exe
Size 256KB
Sample221231-vlttaaaa48
SHA256 d967096daa4e7a0fbd4194e100da508b804cb7a519e6218740e81010a508ae67
MD5 8075448a59244cae7460d5e77a94da8d
SHA1 59e5b681a75e6976f0a9b2ea982bf91578c57ab4
SHA512 c53a6a0730c17e28bfe79c4b8f9bdce8c0a93599b8d98606553b8cccdcc61fb82b282ba5b7f6c917796f025c9c497bf546d134ba09704df79f7568dcc0ccd8f8
SSDEEP 3072:9T7ng+LjEL2d1PsGRgbWPCiwfNYdinKXfs5mrVmqsW7fboI27hZY:hbULSPslliCUXHM47f4ZY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 256KB

file.exe

IMPHASH fd1c9dd63d73260d787f3a49b59533b8
SHA256 d967096daa4e7a0fbd4194e100da508b804cb7a519e6218740e81010a508ae67
MD5 8075448a59244cae7460d5e77a94da8d
SHA1 59e5b681a75e6976f0a9b2ea982bf91578c57ab4
SHA512 c53a6a0730c17e28bfe79c4b8f9bdce8c0a93599b8d98606553b8cccdcc61fb82b282ba5b7f6c917796f025c9c497bf546d134ba09704df79f7568dcc0ccd8f8
SSDEEP 3072:9T7ng+LjEL2d1PsGRgbWPCiwfNYdinKXfs5mrVmqsW7fboI27hZY:hbULSPslliCUXHM47f4ZY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28591

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW SearchPathW VerifyVersionInfoW CopyFileExW GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags ExitThread GetModuleHandleW SetFileTime InterlockedDecrement RemoveVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA InterlockedIncrement SetFileApisToOEM GetModuleHandleA GetTickCount SetLastError GetPrivateProfileStructA AddConsoleAliasA GetConsoleAliasW FindResourceA LoadLibraryA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId CloseHandle VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount SetFilePointer LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CreateFileA

user32

CharUpperBuffW

gdi32

SetBrushOrgEx

advapi32

AccessCheckByType

Sharing