file[.]exe | Triage™

General

Target
file.exe
Size 276KB
Sample221202-h8exeshh3t
SHA256 03109d4d2d52709f20ada17cd95a3b2ea75d16b0856a40f95b23acc1816b27d5
MD5 2d5d7a97eb48f9ae6f56fa15f391a7ab
SHA1 920262b6b7f0b8a4bc482cf930ed5f67da32edfc
SHA512 a7e8371f729033ae8749f5679f7678d5bf1448ac56f65e448582bfde416a21276917c71f0b1b438b0058931d128b80f399473e3a904964d8f492d80d718007ea
SSDEEP 6144:gTbYLHC7+nCQb1epET7mqd1zNMC+uRjMgU:gwLC6CQR7TCm15MQRQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 276KB

file.exe

IMPHASH ada1574921758b94bdbbaf1a2bb072a7
SHA256 03109d4d2d52709f20ada17cd95a3b2ea75d16b0856a40f95b23acc1816b27d5
MD5 2d5d7a97eb48f9ae6f56fa15f391a7ab
SHA1 920262b6b7f0b8a4bc482cf930ed5f67da32edfc
SHA512 a7e8371f729033ae8749f5679f7678d5bf1448ac56f65e448582bfde416a21276917c71f0b1b438b0058931d128b80f399473e3a904964d8f492d80d718007ea
SSDEEP 6144:gTbYLHC7+nCQb1epET7mqd1zNMC+uRjMgU:gwLC6CQR7TCm15MQRQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23935

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA LCMapStringA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

CreateRestrictedToken

Sharing