file[.]exe | Triage™

General

Target
file.exe
Size 276KB
Sample221202-j82lvsda8v
SHA256 8239b046a1da2437feab39ea53b0f382c66809efbbb37394e1838d73ea92701c
MD5 ce1b406c6ff4e8271614d241505feb28
SHA1 907eaed629178887c155d7f81716dfc981c56381
SHA512 7addeab7b5c179988efe0ec166f53bc084e50b7101c135aee1c9b6771ab6855de5a779463a9748c4574177f2de82ccb75ed6884176ea3edfb1164033b8263364
SSDEEP 3072:e1eH86lbZLaqr6etq5qVnrYQicVzeofSZl9+/YcElHKzhIh3eGjMgG1ao5Lc:YqZLNr6enVrYiVzxfSVhUzuRjMgU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 276KB

file.exe

IMPHASH ada1574921758b94bdbbaf1a2bb072a7
SHA256 8239b046a1da2437feab39ea53b0f382c66809efbbb37394e1838d73ea92701c
MD5 ce1b406c6ff4e8271614d241505feb28
SHA1 907eaed629178887c155d7f81716dfc981c56381
SHA512 7addeab7b5c179988efe0ec166f53bc084e50b7101c135aee1c9b6771ab6855de5a779463a9748c4574177f2de82ccb75ed6884176ea3edfb1164033b8263364
SSDEEP 3072:e1eH86lbZLaqr6etq5qVnrYQicVzeofSZl9+/YcElHKzhIh3eGjMgG1ao5Lc:YqZLNr6enVrYiVzxfSVhUzuRjMgU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23935

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA LCMapStringA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

CreateRestrictedToken

Sharing