file[.]exe | Triage™

General

Target
file.exe
Size 391KB
Sample221027-p4l89scbe4
SHA256 80fbdceeba1ae88efe902e8a0d1349d43c3c6e1462af5d7195191f6446c1d60d
MD5 921c82b842c2bc715558f2b89ffe6926
SHA1 65a4a78c30b1e8e009e3e32a2ce96cf7bb3b8b5c
SHA512 4be6674542f68befb8e5dd50efe083041138e5194cee4d5df70e840bde7ffe4a8748b5e4b845318e66f4f2ec736c4fdd30cefa2ce977b466b89de99b1f6aadc3
SSDEEP 6144:NEc2+Xy3jd/7l8BwuiIlNFdFFniUh1h1zSYNBKzq1sQCmEHM0U:NZ2+Xy3jxx8mui0bdDiyzSYy+1s7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 391KB

file.exe

IMPHASH e8e661a38e14e660bf8d40ad7ce84bcd
SHA256 80fbdceeba1ae88efe902e8a0d1349d43c3c6e1462af5d7195191f6446c1d60d
MD5 921c82b842c2bc715558f2b89ffe6926
SHA1 65a4a78c30b1e8e009e3e32a2ce96cf7bb3b8b5c
SHA512 4be6674542f68befb8e5dd50efe083041138e5194cee4d5df70e840bde7ffe4a8748b5e4b845318e66f4f2ec736c4fdd30cefa2ce977b466b89de99b1f6aadc3
SSDEEP 6144:NEc2+Xy3jd/7l8BwuiIlNFdFFniUh1h1zSYNBKzq1sQCmEHM0U:NZ2+Xy3jxx8mui0bdDiyzSYy+1s7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27456

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA MoveFileExA SetEndOfFile LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetLastError SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing