file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221027-n7fp8acbam
SHA256 e1bd0db43baec101df894317ecd48cc8c064c6acbc1a44e567c3a2b8739e1449
MD5 03cf7e78199749a6183ae114f39c700f
SHA1 c2b20094fe51c39c7d8f7de0c3a783add527741e
SHA512 0430b46791b510cc6e37eedd67971c5f929de9be3bec7ad59911d54c8c15abb46376d19721c393c262be227ca3def063fe96236f74ecf516d931689379df5e64
SSDEEP 3072:cXKCFsCZ0oN0p0Cup45tgOUqbYzDKBGr64486I98oV3SSKIbOEXNE30Kx:Y3plNe0CuegOU8wG4H3V3DOMNE30S
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH b418e2fbdf278283512896fcab57691f
SHA256 e1bd0db43baec101df894317ecd48cc8c064c6acbc1a44e567c3a2b8739e1449
MD5 03cf7e78199749a6183ae114f39c700f
SHA1 c2b20094fe51c39c7d8f7de0c3a783add527741e
SHA512 0430b46791b510cc6e37eedd67971c5f929de9be3bec7ad59911d54c8c15abb46376d19721c393c262be227ca3def063fe96236f74ecf516d931689379df5e64
SSDEEP 3072:cXKCFsCZ0oN0p0Cup45tgOUqbYzDKBGr64486I98oV3SSKIbOEXNE30Kx:Y3plNe0CuegOU8wG4H3V3DOMNE30S
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA MoveFileExA SetEndOfFile LoadResource InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetLastError SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing