file[.]exe | Triage™

General

Target
file.exe
Size 293KB
Sample221029-bkhvvafceq
SHA256 22bac35fd3b8d109440ddf8dc045b9ee46e1f75c46dade2841b77248df2fbaa9
MD5 473a459ab2a909f57e9f4488e7471946
SHA1 b902b36e8dba0b1e7458b22ed46c32ebc25b0242
SHA512 0cd06044cba2fafe322bd36d2316bff346caae2e4abe791d429ba42a9135a2e15ea197a42f4b1524c318d7f3d94912c15f1b37256da1b44c389ac04debbe7629
SSDEEP 6144:wfBJZLRMUFrK2Dp7AMYtX8Com6RS1Y8Yc:KBTdM/29DYtsU6RYYW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 293KB

file.exe

IMPHASH 0094705b2c9b847219b2817888057ed6
SHA256 22bac35fd3b8d109440ddf8dc045b9ee46e1f75c46dade2841b77248df2fbaa9
MD5 473a459ab2a909f57e9f4488e7471946
SHA1 b902b36e8dba0b1e7458b22ed46c32ebc25b0242
SHA512 0cd06044cba2fafe322bd36d2316bff346caae2e4abe791d429ba42a9135a2e15ea197a42f4b1524c318d7f3d94912c15f1b37256da1b44c389ac04debbe7629
SSDEEP 6144:wfBJZLRMUFrK2Dp7AMYtX8Com6RS1Y8Yc:KBTdM/29DYtsU6RYYW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19659

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile GetConsoleAliasA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW Sleep AssignProcessToJobObject HeapDestroy GetFileAttributesA CreateMutexW WriteConsoleW lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW ReadConsoleInputW GetConsoleAliasW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing