file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221027-vzvmqsdaeq
SHA256 e3fdbd484f4bd5d9bc8f6cded8f39d7dd23738b8de5bd391ed70c66e0c806591
MD5 68c81ae0153755e92d610c253327af01
SHA1 38dbf298f24e87e647add1145dff7658a05a3116
SHA512 ca9c4e9df4203e847ff466bf6cc845e03f00ab54b1ba4eb164a900feff8af9192c1b36096d7d8cff6262cdd31bf84659c590ff8f15e218e1fc79814131c2b043
SSDEEP 3072:xOXOoUE8ZNCa03hy6sg5b3s00NnlFVztGag8t54aoHLZL2NS1f3IRRf0Kbo:40/Q3hygsfL1MzrZL2Q1fo0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH d6f3b53e54110b981e8d25178c917088
SHA256 e3fdbd484f4bd5d9bc8f6cded8f39d7dd23738b8de5bd391ed70c66e0c806591
MD5 68c81ae0153755e92d610c253327af01
SHA1 38dbf298f24e87e647add1145dff7658a05a3116
SHA512 ca9c4e9df4203e847ff466bf6cc845e03f00ab54b1ba4eb164a900feff8af9192c1b36096d7d8cff6262cdd31bf84659c590ff8f15e218e1fc79814131c2b043
SSDEEP 3072:xOXOoUE8ZNCa03hy6sg5b3s00NnlFVztGag8t54aoHLZL2NS1f3IRRf0Kbo:40/Q3hygsfL1MzrZL2Q1fo0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SetEndOfFile LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc RtlUnwind SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoA FlushFileBuffers GetProcessHeap MultiByteToWideChar ReadFile LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing