file[.]exe | Triage™

General

Target
file.exe
Size 288KB
Sample221027-xe7snsdae2
SHA256 35bc612f9d7bf6de3ff19b9b3f2323e230f732a75c8123498f97893705d13814
MD5 1bfad71bf4a9bd81217633433df38388
SHA1 193c577b657cc3dce2e71c498c7f5d9808c275c0
SHA512 b0c1688e779b72b063b94645889b4a256a3878438ccff21a21cf77b6deafd00c74d93a36aa3345d6532a0535417d9a6e535eb2b8524350754d5523f8e09fdb41
SSDEEP 6144:5wqpJMIyMYFb80+bupQo1jfZwsuL2kl0:5wqpJMgYFb8Lb6vdhu+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 288KB

file.exe

IMPHASH ff6659a3b7adcc9d3b718a91e331c2a9
SHA256 35bc612f9d7bf6de3ff19b9b3f2323e230f732a75c8123498f97893705d13814
MD5 1bfad71bf4a9bd81217633433df38388
SHA1 193c577b657cc3dce2e71c498c7f5d9808c275c0
SHA512 b0c1688e779b72b063b94645889b4a256a3878438ccff21a21cf77b6deafd00c74d93a36aa3345d6532a0535417d9a6e535eb2b8524350754d5523f8e09fdb41
SSDEEP 6144:5wqpJMIyMYFb80+bupQo1jfZwsuL2kl0:5wqpJMgYFb8Lb6vdhu+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing