file[.]exe | Triage™

General

Target
file.exe
Size 387KB
Sample221027-xx8spadcbj
SHA256 911ecf68a620339872678ffdb5c8401d0f0c2585ebff015bf6ec28a995f98dec
MD5 0461288d6cf21a14aa6a66b0cb66c182
SHA1 9358ee1e057c8f954b3fe4ccfc876a477e8452ed
SHA512 f8df79ce0ed3647c9057da38522d240df5d0151ec8a2132cdd75e499652d3e82d88b9119d385494e542bafff7f44751c5a75ff2c661f6733303688eac03904e4
SSDEEP 6144:KLqdsueO1/B3rqnRnRsc23IcTh8h8aODztQ/rElW7J0:KLqdsL+32RnhgTh8hjatH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 387KB

file.exe

IMPHASH e558f40aca4f32a75ed234dc7b40d290
SHA256 911ecf68a620339872678ffdb5c8401d0f0c2585ebff015bf6ec28a995f98dec
MD5 0461288d6cf21a14aa6a66b0cb66c182
SHA1 9358ee1e057c8f954b3fe4ccfc876a477e8452ed
SHA512 f8df79ce0ed3647c9057da38522d240df5d0151ec8a2132cdd75e499652d3e82d88b9119d385494e542bafff7f44751c5a75ff2c661f6733303688eac03904e4
SSDEEP 6144:KLqdsueO1/B3rqnRnRsc23IcTh8h8aODztQ/rElW7J0:KLqdsL+32RnhgTh8hjatH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27360

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW LoadLibraryW ReadConsoleInputA AssignProcessToJobObject CreateEventA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetVolumeNameForVolumeMountPointA lstrlenW LCMapStringA FillConsoleOutputCharacterW OpenMutexW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomA FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA WriteConsoleW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing