file[.]exe | Triage™

General

Target
file.exe
Size 397KB
Sample221028-drbq8aedc7
SHA256 e41c6f2ea948ada4071efb5e95e528d5f640714e0c5c14a98e7e7ced0f924a88
MD5 588a8fdeacae2dfff85fd4a8423d66a4
SHA1 aa7a7dd2b03258fcc8a50d8419852dd71dc34326
SHA512 e773725ea5d7f74f87971efb9b36e95b10f7a8aab6e77656326c8bbf270d3d4acb2b0f1917a7ff41ba60a104f4f29ab8dd1afc1342f67995b74ed033c7018dd5
SSDEEP 6144:mlHU0LLozZs+7NjJME2GvQisHdkOC1UAEFN2wCS1aupUPE:mlHhIm+Bj2tG9xOza8U0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 397KB

file.exe

IMPHASH 7b61acf6f32731558508831ea4bb0cee
SHA256 e41c6f2ea948ada4071efb5e95e528d5f640714e0c5c14a98e7e7ced0f924a88
MD5 588a8fdeacae2dfff85fd4a8423d66a4
SHA1 aa7a7dd2b03258fcc8a50d8419852dd71dc34326
SHA512 e773725ea5d7f74f87971efb9b36e95b10f7a8aab6e77656326c8bbf270d3d4acb2b0f1917a7ff41ba60a104f4f29ab8dd1afc1342f67995b74ed033c7018dd5
SSDEEP 6144:mlHU0LLozZs+7NjJME2GvQisHdkOC1UAEFN2wCS1aupUPE:mlHhIm+Bj2tG9xOza8U0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27375

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW LoadLibraryW AssignProcessToJobObject CreateEventA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW OpenMutexW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomA FoldStringW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW lstrlenW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing