file[.]exe | Triage™

General

Target
file.exe
Size 349KB
Sample221202-3h9pbsed48
SHA256 8464d3a5a0e67cc2eea70029683bb1d359b60a2c728e85800df90f40b73f1240
MD5 1b2678a176feaa155902e212e19d3eb4
SHA1 3e06c68b9870b7655022a49b979fb12e57c56974
SHA512 1975d70f926c73d7f4344b2cd5ca8e457ada78ea894a0bb7d30a7a2322861d8aff743fb7cb487948bf9541139e8604ae12c7263de973ae863fa479d488e7eb29
SSDEEP 6144:vpCIkULhs+RcGRdqRmR6TsoM5/RPTZVVLjESuRjMgUu:v0VUNRcqqRm8TC5xV07RQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 349KB

file.exe

IMPHASH e66a19ec5b2e0314a0706215def76c78
SHA256 8464d3a5a0e67cc2eea70029683bb1d359b60a2c728e85800df90f40b73f1240
MD5 1b2678a176feaa155902e212e19d3eb4
SHA1 3e06c68b9870b7655022a49b979fb12e57c56974
SHA512 1975d70f926c73d7f4344b2cd5ca8e457ada78ea894a0bb7d30a7a2322861d8aff743fb7cb487948bf9541139e8604ae12c7263de973ae863fa479d488e7eb29
SSDEEP 6144:vpCIkULhs+RcGRdqRmR6TsoM5/RPTZVVLjESuRjMgUu:v0VUNRcqqRm8TC5xV07RQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA CopyFileW GetCalendarInfoA LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeW GetACP lstrlenW CreateJobObjectA GetComputerNameA GetProfileIntA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CreateNamedPipeA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetConsoleAliasesW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

IsTokenUntrusted

Sharing