file[.]exe | Triage™

General

Target
file.exe
Size 315KB
Sample221202-kpb3jaed6s
SHA256 cbf6a5d8a36d1c6de5d7d41cfaa9cde7a04db9602db68bb6217658dc773f2be3
MD5 ef401bc68f4261db04ca0be98362067b
SHA1 33874d3c645e4e649da83bbe13ffe0f25411c6b2
SHA512 5ccbcfd9e720ea3d987f884191c943fa01be19c945ff6de1bba7f2d7feb41cf7ae47bf6bba3c1da783a5ef5c17b94d0b7aa61d81a036790a0fbcebf55aa5e498
SSDEEP 6144:ux+L2+k3niU+48hsV/hjKogyBpozadqEq2x6ln1HgEPGuRjMgU:uM6+qr8ho//xph3xOH3RQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 315KB

file.exe

IMPHASH ada1574921758b94bdbbaf1a2bb072a7
SHA256 cbf6a5d8a36d1c6de5d7d41cfaa9cde7a04db9602db68bb6217658dc773f2be3
MD5 ef401bc68f4261db04ca0be98362067b
SHA1 33874d3c645e4e649da83bbe13ffe0f25411c6b2
SHA512 5ccbcfd9e720ea3d987f884191c943fa01be19c945ff6de1bba7f2d7feb41cf7ae47bf6bba3c1da783a5ef5c17b94d0b7aa61d81a036790a0fbcebf55aa5e498
SSDEEP 6144:ux+L2+k3niU+48hsV/hjKogyBpozadqEq2x6ln1HgEPGuRjMgU:uM6+qr8ho//xph3xOH3RQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23935

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA LCMapStringA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

CreateRestrictedToken

Sharing