file[.]exe | Triage™

General

Target
file.exe
Size 267KB
Sample221028-e5dcmsehdp
SHA256 ed782198bcb26da1ab41a4df9fc476a3806cc4806bc4bb5c58514f76fb759436
MD5 b835c3918d3c52db50763202e88c7282
SHA1 b11cb56e449a6fd0ead0172d5a1d58107e1a0fa9
SHA512 1b8d8717b4c32432147981127c0f1b20612e7f01ae02d0a8e09c6377969fe3b548904452beedad2df9bd0dbd565a48bcadfdc15a719dd7531f3d611124d529ce
SSDEEP 3072:lm5XObHiWL06+AxpXfVGifmlk5Wk6pFItOXp8WQSlgaiwCp5o3M/h3gU7:kdgHZL06PXfsiuW640vlJiwOq3j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 267KB

file.exe

IMPHASH 5152ddfb3332deb6fb4acc619da01e5a
SHA256 ed782198bcb26da1ab41a4df9fc476a3806cc4806bc4bb5c58514f76fb759436
MD5 b835c3918d3c52db50763202e88c7282
SHA1 b11cb56e449a6fd0ead0172d5a1d58107e1a0fa9
SHA512 1b8d8717b4c32432147981127c0f1b20612e7f01ae02d0a8e09c6377969fe3b548904452beedad2df9bd0dbd565a48bcadfdc15a719dd7531f3d611124d529ce
SSDEEP 3072:lm5XObHiWL06+AxpXfVGifmlk5Wk6pFItOXp8WQSlgaiwCp5o3M/h3gU7:kdgHZL06PXfsiuW640vlJiwOq3j
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27263

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW AssignProcessToJobObject SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW lstrlenW GetConsoleAliasExesA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateEventW AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW GetVolumeNameForVolumeMountPointW LCMapStringA GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing