file[.]exe | Triage™

General

Target
file.exe
Size 391KB
Sample221027-srxe9acfek
SHA256 714605ca7ffd745319c1939bbb649038ed72adb8e4e6eb2818e22775dd5357e0
MD5 b27077c3ad5df574f29fed580b78c24e
SHA1 c88944b9dd1ac3661173e63887c331ed6b0cd8bc
SHA512 86b1fedb4e689a8db03c4c534f6b1adff96c2eb3c588cb70d295252e36d252d39d0acb0e0678ef181721c0d92d8ccad6d805549e58869ff10be1e1fe0e5d88ab
SSDEEP 6144:IMZoyrPJVvB/A5Qa6686ezZBn7GNetGLpW/071Ppzfd0i:IgoyrPJVO5QazEznnseoWiBze
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 391KB

file.exe

IMPHASH e8e661a38e14e660bf8d40ad7ce84bcd
SHA256 714605ca7ffd745319c1939bbb649038ed72adb8e4e6eb2818e22775dd5357e0
MD5 b27077c3ad5df574f29fed580b78c24e
SHA1 c88944b9dd1ac3661173e63887c331ed6b0cd8bc
SHA512 86b1fedb4e689a8db03c4c534f6b1adff96c2eb3c588cb70d295252e36d252d39d0acb0e0678ef181721c0d92d8ccad6d805549e58869ff10be1e1fe0e5d88ab
SSDEEP 6144:IMZoyrPJVvB/A5Qa6686ezZBn7GNetGLpW/071Ppzfd0i:IgoyrPJVO5QazEznnseoWiBze
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27456

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA MoveFileExA SetEndOfFile LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW SetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetLastError SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing