file[.]exe | Triage™

General

Target
file.exe
Size 257KB
Sample221027-2v4heaebbn
SHA256 30c0867cee1c3d4baba61e3b3e223e7bd4d32c89bf995484c4f82bc9949d3377
MD5 f517cef21f480d957536cb7495c87817
SHA1 510a527ea18aee2978ca62e0feb6a527147f7c88
SHA512 1889c0ce71b6d2453c1268cf8031beec525e3749ea4b290b1354c083008480aff3c0b427bea6bcd6cbed907c8b6ed5ac9a1870c8993c9bacb4e70ad56d378e81
SSDEEP 3072:q1XOVqEJxKxUnq5LjTOEfiq+R4KwGFHt4B8tYZNJoIYh0Kh:wmqQ+b2t4iQYIa0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 257KB

file.exe

IMPHASH e558f40aca4f32a75ed234dc7b40d290
SHA256 30c0867cee1c3d4baba61e3b3e223e7bd4d32c89bf995484c4f82bc9949d3377
MD5 f517cef21f480d957536cb7495c87817
SHA1 510a527ea18aee2978ca62e0feb6a527147f7c88
SHA512 1889c0ce71b6d2453c1268cf8031beec525e3749ea4b290b1354c083008480aff3c0b427bea6bcd6cbed907c8b6ed5ac9a1870c8993c9bacb4e70ad56d378e81
SSDEEP 3072:q1XOVqEJxKxUnq5LjTOEfiq+R4KwGFHt4B8tYZNJoIYh0Kh:wmqQ+b2t4iQYIa0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27360

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW LoadLibraryW ReadConsoleInputA AssignProcessToJobObject CreateEventA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetVolumeNameForVolumeMountPointA lstrlenW LCMapStringA FillConsoleOutputCharacterW OpenMutexW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomA FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA WriteConsoleW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing