file[.]exe | Triage™

General

Target
file.exe
Size 387KB
Sample221202-stnacseb2y
SHA256 93d8bd24e975c3d7ee6e4d9c4f9daebfa356c8ff298e3159ca6326f7d186a506
MD5 549da6baff74faf4fa30f59d378e9824
SHA1 fe83d315bd14cd8cbd278ae6f14b789ba5e3da72
SHA512 29ab290e15419552ef3d76a2ccda165e495075c2ff0ba800845692b1e8e47af5be8d047d4a47e331cf5226c2c39852eaa25a3bcb5f3d4ff95a393b34a068fd91
SSDEEP 6144:XJiIxLkA2XIpPByszDZzwhEl8KUOdyEWfciFtJWH4fDjC0FuRjMgU:Xg2+XIWsJ0Y8XQyEWft7FfCRQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 387KB

file.exe

IMPHASH adf05e4ae4084c6bf3a2c6a5da309837
SHA256 93d8bd24e975c3d7ee6e4d9c4f9daebfa356c8ff298e3159ca6326f7d186a506
MD5 549da6baff74faf4fa30f59d378e9824
SHA1 fe83d315bd14cd8cbd278ae6f14b789ba5e3da72
SHA512 29ab290e15419552ef3d76a2ccda165e495075c2ff0ba800845692b1e8e47af5be8d047d4a47e331cf5226c2c39852eaa25a3bcb5f3d4ff95a393b34a068fd91
SSDEEP 6144:XJiIxLkA2XIpPByszDZzwhEl8KUOdyEWfciFtJWH4fDjC0FuRjMgU:Xg2+XIWsJ0Y8XQyEWft7FfCRQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA CopyFileW GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetProfileIntA GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

IsTokenUntrusted

Sharing