file[.]exe | Triage™

General

Target
file.exe
Size 267KB
Sample221028-d362haede8
SHA256 dc3ad407d38440453c61d2c67c6365f4a6ac9d403c28134ec339ef87af494841
MD5 33bbadd1424f695553f39c9992cff547
SHA1 2c5c4d4674fa1c7b5c3e6587ed552842e04bda9c
SHA512 3e9f1841d18dce70dd020ec5ffd54996e613b7d3bd1d677d7db290ead2412e127c3861ecab7eb9b883d73f35ddd7a2e11d77324d3a31587084f61ffcad2a9ea8
SSDEEP 3072:ovXOYHi5qL/jvQgt4bGC8c5leNCdNaLoy5vNwZGF/q45yChqlmIyA0nP8E3hZDM2:ErHcqL/jL4SCvDeoy5veYhhumIyRUEn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 267KB

file.exe

IMPHASH 7b61acf6f32731558508831ea4bb0cee
SHA256 dc3ad407d38440453c61d2c67c6365f4a6ac9d403c28134ec339ef87af494841
MD5 33bbadd1424f695553f39c9992cff547
SHA1 2c5c4d4674fa1c7b5c3e6587ed552842e04bda9c
SHA512 3e9f1841d18dce70dd020ec5ffd54996e613b7d3bd1d677d7db290ead2412e127c3861ecab7eb9b883d73f35ddd7a2e11d77324d3a31587084f61ffcad2a9ea8
SSDEEP 3072:ovXOYHi5qL/jvQgt4bGC8c5leNCdNaLoy5vNwZGF/q45yChqlmIyA0nP8E3hZDM2:ErHcqL/jL4SCvDeoy5veYhhumIyRUEn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27375

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW LoadLibraryW AssignProcessToJobObject CreateEventA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW OpenMutexW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomA FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW lstrlenW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing