file[.]exe | Triage™

General

Target
file.exe
Size 268KB
Sample221028-he714sfbdp
SHA256 18810cb4bb607a329a6336f69dde756b084e5b6f95bec52519f70221b24cb94e
MD5 d44bdd736596f2d1f3a00e479a7489a5
SHA1 551c52187812184d8c44eb747db0abd1995e3d28
SHA512 89ce39f4c6334ca4d1258cb5ee80072e403e3e9692d91b8a5e55080ffdfcd91f55abdc38357549fc9d91397d37ae41914e90b6430bf150314ddc70afdbf906b7
SSDEEP 3072:dVmuXO0HusLyG9AUTL9Gufmlk50lVRWAHekqbkEB+ve9whgfrexGnnZYp3M/h3gi:S27HHLyG3Lkuu/nWAH1lUwyre6nZGj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 268KB

file.exe

IMPHASH 5152ddfb3332deb6fb4acc619da01e5a
SHA256 18810cb4bb607a329a6336f69dde756b084e5b6f95bec52519f70221b24cb94e
MD5 d44bdd736596f2d1f3a00e479a7489a5
SHA1 551c52187812184d8c44eb747db0abd1995e3d28
SHA512 89ce39f4c6334ca4d1258cb5ee80072e403e3e9692d91b8a5e55080ffdfcd91f55abdc38357549fc9d91397d37ae41914e90b6430bf150314ddc70afdbf906b7
SSDEEP 3072:dVmuXO0HusLyG9AUTL9Gufmlk50lVRWAHekqbkEB+ve9whgfrexGnnZYp3M/h3gi:S27HHLyG3Lkuu/nWAH1lUwyre6nZGj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27263

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW AssignProcessToJobObject SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW lstrlenW GetConsoleAliasExesA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateEventW AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW GetVolumeNameForVolumeMountPointW LCMapStringA GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing