file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221029-nat7caecck
SHA256 a3c45bdd4ce3fe9b473e0c16df56f667c1cb63fda8a7b39c2ee9b37e35eb1ca7
MD5 d254f03d0535ad4010c905cff5cea066
SHA1 80b73eebd29de1845977c05243f0601188e05374
SHA512 4c93349721caa5cd982b7a0701471bac5978e7f43d3162ea9d0db2768dd2e6f3e98101b812291a033dd2788952e6721a5b21b350659f458198617319273c12ca
SSDEEP 3072:3HJzqBgytL6W4JE1fV5hHl1Imps+kaHP5/sttAjzjvLM/h3:5qBftL6WsEPH0mpLkav1stwzjj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH 34c3f0ca6655048a53619f27618d4b1c
SHA256 a3c45bdd4ce3fe9b473e0c16df56f667c1cb63fda8a7b39c2ee9b37e35eb1ca7
MD5 d254f03d0535ad4010c905cff5cea066
SHA1 80b73eebd29de1845977c05243f0601188e05374
SHA512 4c93349721caa5cd982b7a0701471bac5978e7f43d3162ea9d0db2768dd2e6f3e98101b812291a033dd2788952e6721a5b21b350659f458198617319273c12ca
SSDEEP 3072:3HJzqBgytL6W4JE1fV5hHl1Imps+kaHP5/sttAjzjvLM/h3:5qBftL6WsEPH0mpLkav1stwzjj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetTickCount GetConsoleAliasesLengthA GetGeoInfoW WriteFile GetConsoleCP LoadLibraryW Sleep AssignProcessToJobObject HeapDestroy GetFileAttributesA GetConsoleAliasW CreateMutexW GetSystemDirectoryA lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW ReadConsoleInputW WriteConsoleW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing