file[.]exe | Triage™

General

Target
file.exe
Size 255KB
Sample221027-xe7snsdbgr
SHA256 2d548111ca2b1a045fcbd96e4aac8f83f4025a696bd34bc7e7afa71d73c8c175
MD5 c504e7ae27fb73fe1d494d9b433316f4
SHA1 da3051396dc2eaaf1ee15fb932af881b066f7576
SHA512 91f2cb1f55d21dec3c30142d40c4b618f742d991dd6fb79c1f817ca185180814ec56522147b91a0ed2c639367fcf42b0654a2ebc88149cb36de35ed032d658a0
SSDEEP 3072:VoXOtIq/1sxonEW0ZN58lY/00KdzriZF3W/drSf+PulZ21g0K9:+OIqzjITF3WVU+PuH2G0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 255KB

file.exe

IMPHASH ff6659a3b7adcc9d3b718a91e331c2a9
SHA256 2d548111ca2b1a045fcbd96e4aac8f83f4025a696bd34bc7e7afa71d73c8c175
MD5 c504e7ae27fb73fe1d494d9b433316f4
SHA1 da3051396dc2eaaf1ee15fb932af881b066f7576
SHA512 91f2cb1f55d21dec3c30142d40c4b618f742d991dd6fb79c1f817ca185180814ec56522147b91a0ed2c639367fcf42b0654a2ebc88149cb36de35ed032d658a0
SSDEEP 3072:VoXOtIq/1sxonEW0ZN58lY/00KdzriZF3W/drSf+PulZ21g0K9:+OIqzjITF3WVU+PuH2G0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing