file[.]exe | Triage™

General

Target
file.exe
Size 398KB
Sample221028-bxzdcseca2
SHA256 caa9458f14985b1d1de68af03f88db426a844dbfb8fa8b1f670e8fe256238049
MD5 2d6707b569e21f105a82659db8ce262b
SHA1 104704bd5d3f60a319727cf1abcd807e21b754a7
SHA512 928c91c91180ba1f8e195c96ee8532c6550e09cf97a8fe9c56dc654644a092199671f58e19dbca7b5450b119b0a8de74de6abe282fa97fbfaf5036e0eff54013
SSDEEP 6144:w3TqkePhdTkBR6Yk6NyPvC756HaW5zeqqmL2sgB61mip/nM:w3TqkePhdTkBMYdIvC0HhKmL2+Mip0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 398KB

file.exe

IMPHASH a86e9b24927f8caf6c45f2593a2300fb
SHA256 caa9458f14985b1d1de68af03f88db426a844dbfb8fa8b1f670e8fe256238049
MD5 2d6707b569e21f105a82659db8ce262b
SHA1 104704bd5d3f60a319727cf1abcd807e21b754a7
SHA512 928c91c91180ba1f8e195c96ee8532c6550e09cf97a8fe9c56dc654644a092199671f58e19dbca7b5450b119b0a8de74de6abe282fa97fbfaf5036e0eff54013
SSDEEP 6144:w3TqkePhdTkBR6Yk6NyPvC756HaW5zeqqmL2sgB61mip/nM:w3TqkePhdTkBMYdIvC0HhKmL2+Mip0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27360

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW LoadLibraryW AssignProcessToJobObject CreateEventA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW OpenMutexW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomA FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW lstrlenW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing