file[.]exe | Triage™

General

Target
file.exe
Size 267KB
Sample221028-a2b8ysedgn
SHA256 b37fbcfc277a49be5515df9030fbb83d8d74e0b4ad2f641eb52b3d16d195494a
MD5 1471c7af84b762fccd5854321e9dba7b
SHA1 a3aff7332f4fb50f9505b5c956f8ed6a5472847b
SHA512 496c2b3f06e7d0ca0fa0dfa190c2f2dd496dffdde478e70923d17663e7f0a7f849af96b5d3486cac81c4b38fb6a971f126b1b2c1718af7179a51fc5d657ac38e
SSDEEP 3072:B9XOztqKVxP6eX15RcfdjdsS3dARtMZKrlDbyEI9+w3M/h31:zatqkpcfr3uYUlbU9+0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 267KB

file.exe

IMPHASH a86e9b24927f8caf6c45f2593a2300fb
SHA256 b37fbcfc277a49be5515df9030fbb83d8d74e0b4ad2f641eb52b3d16d195494a
MD5 1471c7af84b762fccd5854321e9dba7b
SHA1 a3aff7332f4fb50f9505b5c956f8ed6a5472847b
SHA512 496c2b3f06e7d0ca0fa0dfa190c2f2dd496dffdde478e70923d17663e7f0a7f849af96b5d3486cac81c4b38fb6a971f126b1b2c1718af7179a51fc5d657ac38e
SSDEEP 3072:B9XOztqKVxP6eX15RcfdjdsS3dARtMZKrlDbyEI9+w3M/h31:zatqkpcfr3uYUlbU9+0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27360

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW LoadLibraryW AssignProcessToJobObject CreateEventA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW OpenMutexW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomA FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW lstrlenW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing