file[.]exe | Triage™

General

Target
file.exe
Size 300KB
Sample221028-a2b8ysedgp
SHA256 9cd795139a13e93f44b20f21a677d5e592f7e4e50c0c081e5a063dfe7632f8a2
MD5 ffc24755531411f9496a8167101f32d0
SHA1 f40e9a3a18f43b0525948ffcec9fe9b107167af3
SHA512 3ba5cdfa17cbb518f08fb52a8ae3f6d72fcbfb7de56ca5b5f985cdbc0251463571f827368066f071650c4b4597e804d3a95b5f6ce2b85e12400c369757ddcbf8
SSDEEP 6144:VIq0o3SzbW9TfHFUyHva1MCKnH6mRe0ucN:VIq02wW9TfayHvaeCaH6cN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 300KB

file.exe

IMPHASH a86e9b24927f8caf6c45f2593a2300fb
SHA256 9cd795139a13e93f44b20f21a677d5e592f7e4e50c0c081e5a063dfe7632f8a2
MD5 ffc24755531411f9496a8167101f32d0
SHA1 f40e9a3a18f43b0525948ffcec9fe9b107167af3
SHA512 3ba5cdfa17cbb518f08fb52a8ae3f6d72fcbfb7de56ca5b5f985cdbc0251463571f827368066f071650c4b4597e804d3a95b5f6ce2b85e12400c369757ddcbf8
SSDEEP 6144:VIq0o3SzbW9TfHFUyHva1MCKnH6mRe0ucN:VIq02wW9TfayHvaeCaH6cN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27360

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW LoadLibraryW AssignProcessToJobObject CreateEventA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW OpenMutexW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomA FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW lstrlenW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing