file[.]exe | Triage™

General

Target
file.exe
Size 391KB
Sample221027-r8smyscdh4
SHA256 ad08b0274d44e0740d5a7fe2b1125ed13ca9569c9a35256e360d8a4c81a45ddd
MD5 cc58acab2d41ff0733405aed8ad14aed
SHA1 5e6c513a34eb06185ebe9238fea6ab928815e50d
SHA512 6a022cdd8399d31f06df95691ae2e9178652738fab7e5a9403e89c3b92c3bd8d942ced9b853ca467110ed3f07d542890d73ccd8d37e3795989e11a2f2a624406
SSDEEP 6144:izVFCDhkYR0OFJ0fAvg1eY0BK1BOMBscrgDXLJtFUoWrA8sv/+F1rc0U:i5FCDhkYzJ0IvgePGvzrgxEoWUvv/+J
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 391KB

file.exe

IMPHASH e8e661a38e14e660bf8d40ad7ce84bcd
SHA256 ad08b0274d44e0740d5a7fe2b1125ed13ca9569c9a35256e360d8a4c81a45ddd
MD5 cc58acab2d41ff0733405aed8ad14aed
SHA1 5e6c513a34eb06185ebe9238fea6ab928815e50d
SHA512 6a022cdd8399d31f06df95691ae2e9178652738fab7e5a9403e89c3b92c3bd8d942ced9b853ca467110ed3f07d542890d73ccd8d37e3795989e11a2f2a624406
SSDEEP 6144:izVFCDhkYR0OFJ0fAvg1eY0BK1BOMBscrgDXLJtFUoWrA8sv/+F1rc0U:i5FCDhkYzJ0IvgePGvzrgxEoWUvv/+J
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27456

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA MoveFileExA SetEndOfFile LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetLastError SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing