file[.]exe | Triage™

General

Target
file.exe
Size 256KB
Sample221231-vwe3waaa76
SHA256 ea352e5f678ca67dd9210261cabdd2eb17723ab94a38f9111ac86186b012340b
MD5 fe4bd7b275c38f6bbada20c131ada4aa
SHA1 ec1cac2a0ceeecbc415665cd14b9d59d68078aae
SHA512 55fdc6eabe57e9ada2d1eecfb0327d0359829e5b722b63edfbd2c0c38575c810223c635f54c211e26db2a74df156db268c887f82906ad87f54bc91e1e6aff841
SSDEEP 3072:0gawmBClgeL65FmxoORJvYkO9OI+iaZU6KtmqzXd27hZY:LQCJLKmxoKvNO9OI+iMU6BSIZY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 256KB

file.exe

IMPHASH fd1c9dd63d73260d787f3a49b59533b8
SHA256 ea352e5f678ca67dd9210261cabdd2eb17723ab94a38f9111ac86186b012340b
MD5 fe4bd7b275c38f6bbada20c131ada4aa
SHA1 ec1cac2a0ceeecbc415665cd14b9d59d68078aae
SHA512 55fdc6eabe57e9ada2d1eecfb0327d0359829e5b722b63edfbd2c0c38575c810223c635f54c211e26db2a74df156db268c887f82906ad87f54bc91e1e6aff841
SSDEEP 3072:0gawmBClgeL65FmxoORJvYkO9OI+iaZU6KtmqzXd27hZY:LQCJLKmxoKvNO9OI+iMU6BSIZY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28591

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW SearchPathW VerifyVersionInfoW CopyFileExW GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags ExitThread GetModuleHandleW SetFileTime InterlockedDecrement RemoveVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA InterlockedIncrement SetFileApisToOEM GetModuleHandleA GetTickCount SetLastError GetPrivateProfileStructA AddConsoleAliasA GetConsoleAliasW FindResourceA LoadLibraryA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId CloseHandle VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount SetFilePointer LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CreateFileA

user32

CharUpperBuffW

gdi32

SetBrushOrgEx

advapi32

AccessCheckByType

Sharing