file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample221028-qectzafeh7
SHA256 eaa3f3b508d7d067cebd6fe0cfd8f429c691535f2863343917d8d292e880505f
MD5 4e9e4073634ab0bd15bee51720ccc78f
SHA1 6486dd373e3b712e20edc520e0e2398cecd32003
SHA512 a421995fac5ed6d33bdb75717a7d5430fe660b5635378ecca7386d62497152abc406ed0a17fc5a5f3e937b579407765852996b1ab2b1414819aff0051efaf761
SSDEEP 6144:UiOHqLjLppiNJ69+lx3lCZqASL69Kb9GZx:UhHqzpgPisASLfGZx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH 55ce9fb6dc30e1e2bdf26439f9e36d01
SHA256 eaa3f3b508d7d067cebd6fe0cfd8f429c691535f2863343917d8d292e880505f
MD5 4e9e4073634ab0bd15bee51720ccc78f
SHA1 6486dd373e3b712e20edc520e0e2398cecd32003
SHA512 a421995fac5ed6d33bdb75717a7d5430fe660b5635378ecca7386d62497152abc406ed0a17fc5a5f3e937b579407765852996b1ab2b1414819aff0051efaf761
SSDEEP 6144:UiOHqLjLppiNJ69+lx3lCZqASL69Kb9GZx:UhHqzpgPisASLfGZx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27295

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW AssignProcessToJobObject HeapDestroy GetFileAttributesA GetConsoleAliasW GetConsoleAliasExesA lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomW CreateEventW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW ReadConsoleInputW WriteConsoleW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing