file[.]exe | Triage™

General

Target
file.exe
Size 288KB
Sample221027-wmf49adbbr
SHA256 1b0135eb9457bbc1cd92e1acfecb9b3cf2c5c7e2ae9ecb97b373790ca795f1c3
MD5 35e49de6a91f1884eafd164662f9b19e
SHA1 1e1ae094471935984b7ef61d7b311ea1c09e2211
SHA512 47554e940df5e3305de8925c6e784fa592d9cf060446e8c7545e8f437da58a3cb46e3e8216bed5858c29226a906f76fe2994e87fcdb6a27b93e55b6030564ccc
SSDEEP 3072:YccXOjqy7xmncm0ZN5LlhdGnV0Qmj5f+rq7n7M0qRo9CSZme1qi0kHM73AuWbw5w:CMqb/v0d5UANaSZJ0ksb0ZHX0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 288KB

file.exe

IMPHASH ff6659a3b7adcc9d3b718a91e331c2a9
SHA256 1b0135eb9457bbc1cd92e1acfecb9b3cf2c5c7e2ae9ecb97b373790ca795f1c3
MD5 35e49de6a91f1884eafd164662f9b19e
SHA1 1e1ae094471935984b7ef61d7b311ea1c09e2211
SHA512 47554e940df5e3305de8925c6e784fa592d9cf060446e8c7545e8f437da58a3cb46e3e8216bed5858c29226a906f76fe2994e87fcdb6a27b93e55b6030564ccc
SSDEEP 3072:YccXOjqy7xmncm0ZN5LlhdGnV0Qmj5f+rq7n7M0qRo9CSZme1qi0kHM73AuWbw5w:CMqb/v0d5UANaSZJ0ksb0ZHX0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing