file[.]exe | Triage™

General

Target
file.exe
Size 270KB
Sample221010-k3armabcf9
SHA256 f43b87a5994f22e1be3aac5f9e53bc13985f330faa046939edd672916e2bf23e
MD5 1ae7eff7c05e505493373ec47d10f65d
SHA1 e28caf545e625377b1b39e3e82e6e09e07a038ab
SHA512 f643d46476e6cefb90dd0d2238836614feae58aa60e6381468c417193b0cef505f02ef8fc648d59f09f8c79899ae49b79035a060ebd281672bfe6f972ebf9085
SSDEEP 6144:MzdJQ5C7CK24YJ8imiuUCKFE4IDVultmrwVfquS:MjQk7CKHg8iP7J6Vuud
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 270KB

file.exe

IMPHASH 337347533a46cb2c3d906f08d6c719e5
SHA256 f43b87a5994f22e1be3aac5f9e53bc13985f330faa046939edd672916e2bf23e
MD5 1ae7eff7c05e505493373ec47d10f65d
SHA1 e28caf545e625377b1b39e3e82e6e09e07a038ab
SHA512 f643d46476e6cefb90dd0d2238836614feae58aa60e6381468c417193b0cef505f02ef8fc648d59f09f8c79899ae49b79035a060ebd281672bfe6f972ebf9085
SSDEEP 6144:MzdJQ5C7CK24YJ8imiuUCKFE4IDVultmrwVfquS:MjQk7CKHg8iP7J6Vuud
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29488

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadHugeReadPtr SetEndOfFile GetConsoleAliasExesLengthA GetConsoleAliasA HeapFree SetComputerNameW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA GetTickCount EnumCalendarInfoExW ConvertFiberToThread WaitNamedPipeW EnumResourceTypesA FindResourceExA GlobalAlloc ReadConsoleInputA SetVolumeMountPointA GetFileAttributesA WriteConsoleW GetGeoInfoA GetTimeZoneInformation GetBinaryTypeW GetVolumePathNameA IsBadStringPtrA WritePrivateProfileStringW GetCPInfoExW MoveFileExA GetProcAddress VirtualAlloc GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc DnsHostnameToComputerNameA GetFileType CreateEventW AddAtomA FoldStringW FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect SetFileShortNameA GetVersionExA SetFileValidData FindActCtxSectionStringW LCMapStringW GetLastError TlsGetValue TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

user32

ClientToScreen

advapi32

DeregisterEventSource

Sharing