file[.]exe | Triage™

General

Target
file.exe
Size 348KB
Sample221202-1ggaaaff92
SHA256 9601538aa80e4e24edcdcf57b0152131a66a7f60991abc62881407c3bde19d1c
MD5 526c5327ab63dcc11b07a4d6adc57f1b
SHA1 6d21e8f2102d9cb5be52e50e4fbde220b6aeb3db
SHA512 aebdde8f9b0324c85c2e9804da9e9e6af681d44ef88dfd87478f2d8def1e40162e95d327c4274f019518ec86422badca7754ef005d5fc85a95c11263f6592996
SSDEEP 6144:VpWIuw1LfsGdIGRA27tG4WIHZ71ByFOUKyLuRjMgUu:VoXw1PdIa7tG4TNyFiy6RQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 348KB

file.exe

IMPHASH e66a19ec5b2e0314a0706215def76c78
SHA256 9601538aa80e4e24edcdcf57b0152131a66a7f60991abc62881407c3bde19d1c
MD5 526c5327ab63dcc11b07a4d6adc57f1b
SHA1 6d21e8f2102d9cb5be52e50e4fbde220b6aeb3db
SHA512 aebdde8f9b0324c85c2e9804da9e9e6af681d44ef88dfd87478f2d8def1e40162e95d327c4274f019518ec86422badca7754ef005d5fc85a95c11263f6592996
SSDEEP 6144:VpWIuw1LfsGdIGRA27tG4WIHZ71ByFOUKyLuRjMgUu:VoXw1PdIa7tG4TNyFiy6RQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA CopyFileW GetCalendarInfoA LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeW GetACP lstrlenW CreateJobObjectA GetComputerNameA GetProfileIntA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CreateNamedPipeA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetConsoleAliasesW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

IsTokenUntrusted

Sharing