file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample221028-mpdbpsfgfn
SHA256 6724ddb4e9eead37ddda5526efa5484e37ade99449de76fc84b9dd2aa90648ed
MD5 29c4f7975a92090a67d7e7a553be8c03
SHA1 ccfc84730518ba202b596052bfe6a9db1228316f
SHA512 c57d70dfc33fa768e9557fae92ab21855308b9cac03875342e4f97b7ffce3a2d41d34e29e0c0380404f82e006b7769045696970dab3d86e714e570fd483274b3
SSDEEP 6144:KktHzL2usorLDNdcYBOT2g7PcJpXbH0Nv2qKozEZT:KktHzqVoXBdcaOMVbHqOqwT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH 0ba783a390ae174dbc5807c6f3d204ef
SHA256 6724ddb4e9eead37ddda5526efa5484e37ade99449de76fc84b9dd2aa90648ed
MD5 29c4f7975a92090a67d7e7a553be8c03
SHA1 ccfc84730518ba202b596052bfe6a9db1228316f
SHA512 c57d70dfc33fa768e9557fae92ab21855308b9cac03875342e4f97b7ffce3a2d41d34e29e0c0380404f82e006b7769045696970dab3d86e714e570fd483274b3
SSDEEP 6144:KktHzL2usorLDNdcYBOT2g7PcJpXbH0Nv2qKozEZT:KktHzqVoXBdcaOMVbHqOqwT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27359

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW AssignProcessToJobObject HeapDestroy GetFileAttributesA GetConsoleAliasW WriteConsoleW GetConsoleAliasExesA LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomW CreateEventW FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW ReadConsoleInputW GetVolumeNameForVolumeMountPointW lstrlenW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing