file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample221029-n3e8wsfddp
SHA256 fc86b743c00a7fb27c565d6979a98208a74f332149b5e26406333b37ba0a2570
MD5 1bb9a74dda76384b79c8db14e768b31d
SHA1 49e4a0a2720c8f14e0de99545a8d44f0583b5c66
SHA512 f736f9e328b0dbb56c395382d0e0a59a379bdc6da758e36d39c86f33a7d282628a6bfc40f7672c02d95ac3f1bbff8f602f94fbc5269a47453ac1e681afc71d32
SSDEEP 3072:NHzDZBkYXULY6wgmZV5zmMaI76jvBiB04uaYgBmIUCib7noJ4tmdEjbhCXrR6M/V:9ZBtkLYngJKmZi64ukHib7nbsWjVCE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH 34c3f0ca6655048a53619f27618d4b1c
SHA256 fc86b743c00a7fb27c565d6979a98208a74f332149b5e26406333b37ba0a2570
MD5 1bb9a74dda76384b79c8db14e768b31d
SHA1 49e4a0a2720c8f14e0de99545a8d44f0583b5c66
SHA512 f736f9e328b0dbb56c395382d0e0a59a379bdc6da758e36d39c86f33a7d282628a6bfc40f7672c02d95ac3f1bbff8f602f94fbc5269a47453ac1e681afc71d32
SSDEEP 3072:NHzDZBkYXULY6wgmZV5zmMaI76jvBiB04uaYgBmIUCib7noJ4tmdEjbhCXrR6M/V:9ZBtkLYngJKmZi64ukHib7nbsWjVCE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetTickCount GetConsoleAliasesLengthA GetGeoInfoW WriteFile GetConsoleCP LoadLibraryW Sleep AssignProcessToJobObject HeapDestroy GetFileAttributesA GetConsoleAliasW CreateMutexW GetSystemDirectoryA lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW ReadConsoleInputW WriteConsoleW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing