file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample221030-d7l7wsbfbj
SHA256 cdc06fdc232b39d412be4f95cb7e22a152045d4047a69ec5bf72ad87133713b9
MD5 557868085ae325e62d6c8d64766749c3
SHA1 f329b7eee6b490df78ea448cf1a4968bfbb6f156
SHA512 77cfe73ad358d3c296e721607776bc0ac8d07f1df0432c83ce3c3a904702a6b111d8532d1b4ef5f93a30b417b341cc1367840e3188d60a6f009a4f487a4db92c
SSDEEP 3072:T+ZLEpUYvJLqfxClJa56jA+RbmwO1jrM0uZZ0dQmGwM/h3:9UYvJLqfxClRjHKwO1PMJbSLh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH f1fc6bebd2ae7f3a8d696e55bbb6e33b
SHA256 cdc06fdc232b39d412be4f95cb7e22a152045d4047a69ec5bf72ad87133713b9
MD5 557868085ae325e62d6c8d64766749c3
SHA1 f329b7eee6b490df78ea448cf1a4968bfbb6f156
SHA512 77cfe73ad358d3c296e721607776bc0ac8d07f1df0432c83ce3c3a904702a6b111d8532d1b4ef5f93a30b417b341cc1367840e3188d60a6f009a4f487a4db92c
SSDEEP 3072:T+ZLEpUYvJLqfxClJa56jA+RbmwO1jrM0uZZ0dQmGwM/h3:9UYvJLqfxClRjHKwO1PMJbSLh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18910

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetTickCount GetConsoleAliasesLengthA GetGeoInfoW WriteFile GetConsoleCP LoadLibraryW Sleep ReadConsoleInputA AssignProcessToJobObject HeapDestroy GetFileAttributesA EnumSystemCodePagesA CreateMutexW GetFileAttributesW WriteConsoleW GetSystemDirectoryA lstrlenW LCMapStringA GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW LCMapStringW GetConsoleAliasW GetSystemDefaultLangID HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing