file[.]exe | Triage™

General

Target
file.exe
Size 276KB
Sample221202-hr4jfsge3s
SHA256 4ffd8a5153b680b86b258bde87319885182c5e078cc0c0b16ab64009f7c69979
MD5 8861c3fedd83a41ca2637215c3bea553
SHA1 9394b1527afa8de77c962e0895c681819cb2a529
SHA512 f1e21803aee16d146737284e491685e084b3d0a65e42986d4a4c5233f4860d309e7aa12cd8516baca7ad9384dd8ac43f67fdd2866e7e4b453b184e458eb87653
SSDEEP 3072:exZL86CsL1KL6+tq5qt0OETP2F4HaNMX027CP1JTJbLCrhIh3eGjMgG1ao5Lk:NVsLML6+nt07J8OrOHNPSuRjMgU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 276KB

file.exe

IMPHASH ada1574921758b94bdbbaf1a2bb072a7
SHA256 4ffd8a5153b680b86b258bde87319885182c5e078cc0c0b16ab64009f7c69979
MD5 8861c3fedd83a41ca2637215c3bea553
SHA1 9394b1527afa8de77c962e0895c681819cb2a529
SHA512 f1e21803aee16d146737284e491685e084b3d0a65e42986d4a4c5233f4860d309e7aa12cd8516baca7ad9384dd8ac43f67fdd2866e7e4b453b184e458eb87653
SSDEEP 3072:exZL86CsL1KL6+tq5qt0OETP2F4HaNMX027CP1JTJbLCrhIh3eGjMgG1ao5Lk:NVsLML6+nt07J8OrOHNPSuRjMgU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23935

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA LCMapStringA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

CreateRestrictedToken

Sharing