file[.]exe | Triage™

General

Target
file.exe
Size 388KB
Sample221202-lfc4xada97
SHA256 3140a26ef9d371bece3495df60aebd853f1d31ae818bf27ba2ba1c23baa7431e
MD5 470fe1a72814da0355ad5f0d4257ecf6
SHA1 46b8267c0da73c5cd57013310ed0510258685a93
SHA512 f0432427e555bad587fd047958b46ac8817a0544cae28fbe7b09a3260b0063647a747efecd0e0f83d6326099d6c5509af291c9b8d1e2f814245f3f885e26ee74
SSDEEP 6144:JM9L/OqJnA1Ql3DaVIbuHIOJGVnlHuRjMgU:JK7OyOQl3DaVIbuoOJwORQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 388KB

file.exe

IMPHASH ada1574921758b94bdbbaf1a2bb072a7
SHA256 3140a26ef9d371bece3495df60aebd853f1d31ae818bf27ba2ba1c23baa7431e
MD5 470fe1a72814da0355ad5f0d4257ecf6
SHA1 46b8267c0da73c5cd57013310ed0510258685a93
SHA512 f0432427e555bad587fd047958b46ac8817a0544cae28fbe7b09a3260b0063647a747efecd0e0f83d6326099d6c5509af291c9b8d1e2f814245f3f885e26ee74
SSDEEP 6144:JM9L/OqJnA1Ql3DaVIbuHIOJGVnlHuRjMgU:JK7OyOQl3DaVIbuoOJwORQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23935

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA LCMapStringA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA FillConsoleOutputCharacterW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification OpenJobObjectW FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

CreateRestrictedToken

Sharing