file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221029-xa7bcabaaq
SHA256 d92f82ff8ebf9780a7bd476a536efb734f4b045a52bfc36bc9d124b9aa5ec597
MD5 f78b45fe29a82f14a30aed0c1635ad17
SHA1 bd7fbf20246756bc5ce6ad8356b1b5c854a9ffdc
SHA512 c36ea1d09e9882424ae2ffcad6a60e1e62153b85c79e7a4249761e41bf9616126ca16802b0bfa0622307a25fedcbd68f09263e9fbdc1205c55722e2d875ea57b
SSDEEP 3072:LZoRqB2jJJLMMcjt8q5Pd8JENTW4ALzEB3mKLDTEKWhvPM/h3:uqBULLZcBSaWfLQBlLD4KqP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH c460ecf4e24cb4f72f9f49a8c6c56baa
SHA256 d92f82ff8ebf9780a7bd476a536efb734f4b045a52bfc36bc9d124b9aa5ec597
MD5 f78b45fe29a82f14a30aed0c1635ad17
SHA1 bd7fbf20246756bc5ce6ad8356b1b5c854a9ffdc
SHA512 c36ea1d09e9882424ae2ffcad6a60e1e62153b85c79e7a4249761e41bf9616126ca16802b0bfa0622307a25fedcbd68f09263e9fbdc1205c55722e2d875ea57b
SSDEEP 3072:LZoRqB2jJJLMMcjt8q5Pd8JENTW4ALzEB3mKLDTEKWhvPM/h3:uqBULLZcBSaWfLQBlLD4KqP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19737

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetTickCount GetConsoleAliasesLengthA GetGeoInfoW WriteFile GetConsoleCP LoadLibraryW Sleep ReadConsoleInputA AssignProcessToJobObject HeapDestroy GetFileAttributesA EnumSystemCodePagesA CreateMutexW GetFileAttributesW WriteConsoleW GetSystemDirectoryA lstrlenW LCMapStringA GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW LCMapStringW GetConsoleAliasW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing