file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample221027-vfpblschgr
SHA256 0a54530b720fd7e81e6ea117ebad048f263688fa904f637a5e695e6fd43c2df6
MD5 66f4f28b10346be68da1855164b4adae
SHA1 f63fcba3d0df9f302325f9cec22dae61a84f2ffe
SHA512 6c0114257de852b0997d4936f8f857b0ae23f7550f450bd7e8703f3020f0db1bc16dd68e90c6621c6cc0279911082cc28ab681d3b265bb3c938f60fb031239fa
SSDEEP 3072:uXORgUoANfYUKOSJg5woDlEr4XGwXksyUK5nF+2M7ci7EAozL8QiObbMO0KL8:2P7UKOSKqrt0ftK5nWrrB6N0K
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH d6f3b53e54110b981e8d25178c917088
SHA256 0a54530b720fd7e81e6ea117ebad048f263688fa904f637a5e695e6fd43c2df6
MD5 66f4f28b10346be68da1855164b4adae
SHA1 f63fcba3d0df9f302325f9cec22dae61a84f2ffe
SHA512 6c0114257de852b0997d4936f8f857b0ae23f7550f450bd7e8703f3020f0db1bc16dd68e90c6621c6cc0279911082cc28ab681d3b265bb3c938f60fb031239fa
SSDEEP 3072:uXORgUoANfYUKOSJg5woDlEr4XGwXksyUK5nF+2M7ci7EAozL8QiObbMO0KL8:2P7UKOSKqrt0ftK5nWrrB6N0K
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27648

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SetEndOfFile LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc RtlUnwind SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing