file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221028-v397lagdf8
SHA256 e8ef433038b2b91197b4f616ecdfd5a8abd699df6d0e806c376c5ae249923757
MD5 bf801c2fb909f3ce58ba2e04466b55c6
SHA1 618dc594de3e3790ab8d316fa276a3ca2e560231
SHA512 2e2d1c3a36af18c39679d2f3a34ee73f410e9de800e3a86d9fe9ee6473c1f0d7e9706663294b798f39d9a472e92ad9e231488b325d8157d7dd58f229e7b49b16
SSDEEP 3072:tXOFXHhNLqyAc+8XGNmj57fZYm6NL7IhvHkT1yW0+IJGCW/qGzT9mc5M/h3i:pSXHDLqD8WNkxYms72knqGfj9mc5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH 55ce9fb6dc30e1e2bdf26439f9e36d01
SHA256 e8ef433038b2b91197b4f616ecdfd5a8abd699df6d0e806c376c5ae249923757
MD5 bf801c2fb909f3ce58ba2e04466b55c6
SHA1 618dc594de3e3790ab8d316fa276a3ca2e560231
SHA512 2e2d1c3a36af18c39679d2f3a34ee73f410e9de800e3a86d9fe9ee6473c1f0d7e9706663294b798f39d9a472e92ad9e231488b325d8157d7dd58f229e7b49b16
SSDEEP 3072:tXOFXHhNLqyAc+8XGNmj57fZYm6NL7IhvHkT1yW0+IJGCW/qGzT9mc5M/h3i:pSXHDLqD8WNkxYms72knqGfj9mc5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27295

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW AssignProcessToJobObject HeapDestroy GetFileAttributesA GetConsoleAliasW GetConsoleAliasExesA lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomW CreateEventW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW ReadConsoleInputW WriteConsoleW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing