file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample221027-n6weaacad5
SHA256 8424efe2ab7d7dc98f0ac1b08425c8cfda74acc054faa032b19c6a906633f2a4
MD5 03898d366da3301b88d2cdf6f943a553
SHA1 f057861de2ec079f7164e056f6eecdb46dd34704
SHA512 a5259808cc6575170d8c56cf4a99ba9dcac8c2b729c60a5ab733ffae780244778e42efc1099a2aaab80cfd9e102675febede0e7c2428805658ab045044cca5ce
SSDEEP 6144:Kx0H0eEP5XX4foF8XW9JoUww0jvF9y0S:KmH0eEP5xF8Xa50jtJS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH b418e2fbdf278283512896fcab57691f
SHA256 8424efe2ab7d7dc98f0ac1b08425c8cfda74acc054faa032b19c6a906633f2a4
MD5 03898d366da3301b88d2cdf6f943a553
SHA1 f057861de2ec079f7164e056f6eecdb46dd34704
SHA512 a5259808cc6575170d8c56cf4a99ba9dcac8c2b729c60a5ab733ffae780244778e42efc1099a2aaab80cfd9e102675febede0e7c2428805658ab045044cca5ce
SSDEEP 6144:Kx0H0eEP5XX4foF8XW9JoUww0jvF9y0S:KmH0eEP5xF8Xa50jtJS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA MoveFileExA SetEndOfFile LoadResource InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetLastError SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing