file[.]exe | Triage™

General

Target
file.exe
Size 386KB
Sample221027-x28cqadcdq
SHA256 4a203a75fd6315f4bbca6dffba7c208696bb392aaa3378af7b078485d64bfea0
MD5 6cf6a9df47b905efb920e201297a0e39
SHA1 5c0e8bdc51784b76e4785579690f6a6fe75bf129
SHA512 e3a835cc20e2829b6abc53d4682f0e74e5d36e6736a7a66acc955266e0ca14e1f5d78204abf42e836ffb2fa1ce207acdd6f8fbc78422d2d64f94595b209179fd
SSDEEP 6144:hoqzzSfRKaF01snvdFeTr6vwGnXfvQvlu0C4h91JahBQ0:hoqzzSZ5vdAr6NXnQrCcU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH e558f40aca4f32a75ed234dc7b40d290
SHA256 4a203a75fd6315f4bbca6dffba7c208696bb392aaa3378af7b078485d64bfea0
MD5 6cf6a9df47b905efb920e201297a0e39
SHA1 5c0e8bdc51784b76e4785579690f6a6fe75bf129
SHA512 e3a835cc20e2829b6abc53d4682f0e74e5d36e6736a7a66acc955266e0ca14e1f5d78204abf42e836ffb2fa1ce207acdd6f8fbc78422d2d64f94595b209179fd
SSDEEP 6144:hoqzzSfRKaF01snvdFeTr6vwGnXfvQvlu0C4h91JahBQ0:hoqzzSZ5vdAr6NXnQrCcU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27360

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW LoadLibraryW ReadConsoleInputA AssignProcessToJobObject CreateEventA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetVolumeNameForVolumeMountPointA lstrlenW LCMapStringA FillConsoleOutputCharacterW OpenMutexW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomA FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA WriteConsoleW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing