file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221029-bb275aedc6
SHA256 4bd664b7b0106e1d01a573401a2edc221b207c29cfb79ba716e28f80df3c0c1e
MD5 556673f3438b33ca1d450692cdf0b7ec
SHA1 bdccc2574a7e9a47e34f3c6856c40231a9ec0e75
SHA512 e09af3b6c588a7da9009637699e561606a41b7b90e1078bba7f675d2b5746a0d1ad26ab1392b13c76f5082aea4eea71729830bd040877323781475f515f7fc08
SSDEEP 3072:E6iuBThNLab+o4z5R9H1JZ5s4MSxFvxs+XXs7bfLX47VBS4M/h3:SuBdNLs+n1JPZbDZtKbfLX0VB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH 0094705b2c9b847219b2817888057ed6
SHA256 4bd664b7b0106e1d01a573401a2edc221b207c29cfb79ba716e28f80df3c0c1e
MD5 556673f3438b33ca1d450692cdf0b7ec
SHA1 bdccc2574a7e9a47e34f3c6856c40231a9ec0e75
SHA512 e09af3b6c588a7da9009637699e561606a41b7b90e1078bba7f675d2b5746a0d1ad26ab1392b13c76f5082aea4eea71729830bd040877323781475f515f7fc08
SSDEEP 3072:E6iuBThNLab+o4z5R9H1JZ5s4MSxFvxs+XXs7bfLX47VBS4M/h3:SuBdNLs+n1JPZbDZtKbfLX0VB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19659

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile GetConsoleAliasA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW Sleep AssignProcessToJobObject HeapDestroy GetFileAttributesA CreateMutexW WriteConsoleW lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW ReadConsoleInputW GetConsoleAliasW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing