file[.]exe | Triage™

General

Target
file.exe
Size 257KB
Sample221231-x3szesad39
SHA256 78fdd3d64acf475e6f2eb9af6e97ed3022ba5369cb47c704e397fbe9186ba0bf
MD5 ef1e4c82a2982a0ceb0cf15d742ad5d7
SHA1 c9490e829f7be20b6f3da69c2a000be7bbe5ac26
SHA512 73013ff0367798ccdc375ada89ef0e58d4a24756e42b92c3809df18b3ce235ec5871eacb86771bbc4eb4cb87d25cfdfc57c1c102ec735a33fc6c51fb9914e4bf
SSDEEP 3072:VwPEvi8gLEV9Sr0JRHpLai67p+fgzdHW7YFjPOua9iH70kNmqJdSIjBF27hZY:RULkSr0oiUpxbagb0XijBQZY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 257KB

file.exe

IMPHASH fd1c9dd63d73260d787f3a49b59533b8
SHA256 78fdd3d64acf475e6f2eb9af6e97ed3022ba5369cb47c704e397fbe9186ba0bf
MD5 ef1e4c82a2982a0ceb0cf15d742ad5d7
SHA1 c9490e829f7be20b6f3da69c2a000be7bbe5ac26
SHA512 73013ff0367798ccdc375ada89ef0e58d4a24756e42b92c3809df18b3ce235ec5871eacb86771bbc4eb4cb87d25cfdfc57c1c102ec735a33fc6c51fb9914e4bf
SSDEEP 3072:VwPEvi8gLEV9Sr0JRHpLai67p+fgzdHW7YFjPOua9iH70kNmqJdSIjBF27hZY:RULkSr0oiUpxbagb0XijBQZY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28591

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryA OutputDebugStringW GetProcAddress LocalAlloc MoveFileWithProgressW SearchPathW VerifyVersionInfoW CopyFileExW GetThreadLocale FindNextFileA FindFirstVolumeW LocalShrink LocalFlags ExitThread GetModuleHandleW SetFileTime InterlockedDecrement RemoveVectoredExceptionHandler lstrcatA CreateActCtxW UpdateResourceW CopyFileW FindFirstFileW FreeEnvironmentStringsW EnumResourceLanguagesA InterlockedIncrement SetFileApisToOEM GetModuleHandleA GetTickCount SetLastError GetPrivateProfileStructA AddConsoleAliasA GetConsoleAliasW FindResourceA LoadLibraryA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId CloseHandle VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount SetFilePointer LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile CreateFileA

user32

CharUpperBuffW

gdi32

SetBrushOrgEx

advapi32

AccessCheckByType

Sharing