file[.]exe | Triage™

General

Target
file.exe
Size 349KB
Sample221202-mwp9vadf5v
SHA256 8a858fdd68d0f077dfaee531f871b3c50d12c07efd7c1e8fb9f6a423a3dc2ad6
MD5 a90cc6889107707dfd0956ef281da480
SHA1 3698270137f9d445183f1505194b50f8d4e186bf
SHA512 57f718ff14aa27e22ca7dbfc4511451960c2b963dfb61af579a472204d674ecfbb229019f420fc223bc4c0ef55e641607082b4948602991f950900b6a2d7f6b5
SSDEEP 3072:g28bjdJL9gNJtK5sGE+fx1pLBqYK/MLIHH8c41MZlcLYexBnpRhIh3eGjMgG1aoM:oXdJLaNJtDGhxBKEIHrcvBnbuRjMgU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 349KB

file.exe

IMPHASH fb0f6dff8eaf4e460b845b9b4576f572
SHA256 8a858fdd68d0f077dfaee531f871b3c50d12c07efd7c1e8fb9f6a423a3dc2ad6
MD5 a90cc6889107707dfd0956ef281da480
SHA1 3698270137f9d445183f1505194b50f8d4e186bf
SHA512 57f718ff14aa27e22ca7dbfc4511451960c2b963dfb61af579a472204d674ecfbb229019f420fc223bc4c0ef55e641607082b4948602991f950900b6a2d7f6b5
SSDEEP 3072:g28bjdJL9gNJtK5sGE+fx1pLBqYK/MLIHH8c41MZlcLYexBnpRhIh3eGjMgG1aoM:oXdJLaNJtDGhxBKEIHrcvBnbuRjMgU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24047

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA GetConsoleAliasesW GetProfileIntA GetVolumeNameForVolumeMountPointA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

CreateRestrictedToken

Sharing