file[.]exe | Triage™

General

Target
file.exe
Size 300KB
Sample221028-e5y94sehdr
SHA256 a384828d07c88af1f60cb50cde6bb82df92eab459b5da8f20fe52fb4dd76cf87
MD5 3b8c2241118238474349bc658feb15be
SHA1 e13c06b54f75be4bcee93fa301cb92c6ba2a0e20
SHA512 2a27b2092d0d4006bded4d932c022afd82e29dc49412092e93fc027363dd8f316688ef674ea8e555d5a13d28b7ffff01da5ba7bc0e649b4a109f972bd5200646
SSDEEP 6144:mkrHnL22wzqMuQDTPNJBCXd/cQwBuV3gY6hwp5j:mkrHnipz9uQ/DBCXdXwBuV3gYkwp5j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 300KB

file.exe

IMPHASH 5152ddfb3332deb6fb4acc619da01e5a
SHA256 a384828d07c88af1f60cb50cde6bb82df92eab459b5da8f20fe52fb4dd76cf87
MD5 3b8c2241118238474349bc658feb15be
SHA1 e13c06b54f75be4bcee93fa301cb92c6ba2a0e20
SHA512 2a27b2092d0d4006bded4d932c022afd82e29dc49412092e93fc027363dd8f316688ef674ea8e555d5a13d28b7ffff01da5ba7bc0e649b4a109f972bd5200646
SSDEEP 6144:mkrHnL22wzqMuQDTPNJBCXd/cQwBuV3gY6hwp5j:mkrHnipz9uQ/DBCXdXwBuV3gYkwp5j
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27263

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW AssignProcessToJobObject SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW lstrlenW GetConsoleAliasExesA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateEventW AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW GetVolumeNameForVolumeMountPointW LCMapStringA GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing