file[.]exe | Triage™

General

Target
file.exe
Size 387KB
Sample221202-pfhwyaba61
SHA256 a7b66e5d0dc3864fca39b1a48add13e83799cfbbada0595ce5849edb307742e6
MD5 4b956449fa09bdc44505f0ca4214e510
SHA1 4b88b3a884c82a273f0d6e97c170ecd8d78dd505
SHA512 531fcf0f78cddde0c61a326ceb458debbe87107d8af2c09bb64730bb709e21383e2213e4559231042871e777f13d3a561a6516a70a9acaa2dd85743cc73c990a
SSDEEP 6144:oMyIzLU4+TkxpBZ/05sSZ0wqUpSJOttraiXm9u9Aip325fbRuRjMgU:oBUGTk7o3Z0z2N1Xvnp3SbMRQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 387KB

file.exe

IMPHASH acd7f4a4702fb1d6469ed2184facb77d
SHA256 a7b66e5d0dc3864fca39b1a48add13e83799cfbbada0595ce5849edb307742e6
MD5 4b956449fa09bdc44505f0ca4214e510
SHA1 4b88b3a884c82a273f0d6e97c170ecd8d78dd505
SHA512 531fcf0f78cddde0c61a326ceb458debbe87107d8af2c09bb64730bb709e21383e2213e4559231042871e777f13d3a561a6516a70a9acaa2dd85743cc73c990a
SSDEEP 6144:oMyIzLU4+TkxpBZ/05sSZ0wqUpSJOttraiXm9u9Aip325fbRuRjMgU:oBUGTk7o3Z0z2N1Xvnp3SbMRQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA GetConsoleAliasesW GetProfileIntA GetVolumeNameForVolumeMountPointA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetCPInfoExW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

CreateRestrictedToken

Sharing