file[.]exe | Triage™

General

Target
file.exe
Size 256KB
Sample221027-wmf49adbbq
SHA256 57dcb664bd6a2ed66dc3baeabf7493788796028913f0ea4c2c98e2c99cd8dc46
MD5 3e448e49d463fb484c9a24e21f84a880
SHA1 4a68970c6cf22c9397a940e707c9e85d3e960978
SHA512 3d7cf2528a97be04b0f466958fc4c359e03b52a3ae5ec5f215fd2cc77e8fad54fa98fad9fbc98fe78642fb50c06dca9b04a517f0f2c0c52de567f1d0df1d19f7
SSDEEP 3072:4DXOZqUOxjnoI0ZN5nK6nn30i+kRNuT+vx3HsezZtMOWpAF4Mm0K9:gqqt96K6n354+t3MOObR0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 256KB

file.exe

IMPHASH ff6659a3b7adcc9d3b718a91e331c2a9
SHA256 57dcb664bd6a2ed66dc3baeabf7493788796028913f0ea4c2c98e2c99cd8dc46
MD5 3e448e49d463fb484c9a24e21f84a880
SHA1 4a68970c6cf22c9397a940e707c9e85d3e960978
SHA512 3d7cf2528a97be04b0f466958fc4c359e03b52a3ae5ec5f215fd2cc77e8fad54fa98fad9fbc98fe78642fb50c06dca9b04a517f0f2c0c52de567f1d0df1d19f7
SSDEEP 3072:4DXOZqUOxjnoI0ZN5nK6nn30i+kRNuT+vx3HsezZtMOWpAF4Mm0K9:gqqt96K6n354+t3MOObR0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing