file[.]exe | Triage™

General

Target
file.exe
Size 285KB
Sample221030-dgqsdsaean
SHA256 ebb433d2c79f14e160a7565a50cee0a81f1ad951bbb404aba4c45214e3348207
MD5 a419e6b2e63a449f2d261920ae535ede
SHA1 e21d482860e740b6f45b4c4cb4f6f2d0e2ea7fa8
SHA512 41e816c7bc5b392cba083caffd914a9f460f62f99c19b02fc4c3bd36b4519620ce2b708781adeb37cef1654a04e56a63cceb65936747cc62e189ecaacd891439
SSDEEP 6144:LU+vKtL2XfbCexQs0+95VmyjA6wujL+S:LU+qc5xH0U5Vs63jZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 285KB

file.exe

IMPHASH f1fc6bebd2ae7f3a8d696e55bbb6e33b
SHA256 ebb433d2c79f14e160a7565a50cee0a81f1ad951bbb404aba4c45214e3348207
MD5 a419e6b2e63a449f2d261920ae535ede
SHA1 e21d482860e740b6f45b4c4cb4f6f2d0e2ea7fa8
SHA512 41e816c7bc5b392cba083caffd914a9f460f62f99c19b02fc4c3bd36b4519620ce2b708781adeb37cef1654a04e56a63cceb65936747cc62e189ecaacd891439
SSDEEP 6144:LU+vKtL2XfbCexQs0+95VmyjA6wujL+S:LU+qc5xH0U5Vs63jZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18894

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetTickCount GetConsoleAliasesLengthA GetGeoInfoW WriteFile GetConsoleCP LoadLibraryW Sleep ReadConsoleInputA AssignProcessToJobObject HeapDestroy GetFileAttributesA EnumSystemCodePagesA CreateMutexW GetFileAttributesW WriteConsoleW GetSystemDirectoryA lstrlenW LCMapStringA GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW LCMapStringW GetConsoleAliasW GetSystemDefaultLangID HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing