file[.]exe | Triage™

General

Target
file.exe
Size 348KB
Sample221202-p9tkjadh61
SHA256 e903894ce58c7827e8ea6fec3f9f81d97a0367d20b58923062eccfa09e338c0f
MD5 465660fb97eefc0c6b56a4d25ba3f867
SHA1 e3d7570238d4721b0f7956efa80c3b426ecf2814
SHA512 ced4d420197046e0b822b3a5e143b5d2ba5d818b5e64a9ccf949a0f57058d570e9ae0ec3116af3974b85d654713d7953548c19e0b9fa8391166af3e126a17ccd
SSDEEP 6144:RTFIJL/4KhsxpBsDbOEZS0wjDVCzRMltTaPHr2M+VuRjMgU:RZi/hs6lXgDMMncLO4RQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 348KB

file.exe

IMPHASH acd7f4a4702fb1d6469ed2184facb77d
SHA256 e903894ce58c7827e8ea6fec3f9f81d97a0367d20b58923062eccfa09e338c0f
MD5 465660fb97eefc0c6b56a4d25ba3f867
SHA1 e3d7570238d4721b0f7956efa80c3b426ecf2814
SHA512 ced4d420197046e0b822b3a5e143b5d2ba5d818b5e64a9ccf949a0f57058d570e9ae0ec3116af3974b85d654713d7953548c19e0b9fa8391166af3e126a17ccd
SSDEEP 6144:RTFIJL/4KhsxpBsDbOEZS0wjDVCzRMltTaPHr2M+VuRjMgU:RZi/hs6lXgDMMncLO4RQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA GetConsoleAliasesW GetProfileIntA GetVolumeNameForVolumeMountPointA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

CreateRestrictedToken

Sharing