file[.]exe | Triage™

General

Target
file.exe
Size 348KB
Sample221202-sym56aah47
SHA256 5f85758bb282680a9e3fcaa5676eaa25eb33703ae01954becfa883f6b47640da
MD5 3f1a0654b8a8914613e2e1476d39e9a8
SHA1 877001d5fbf91c6cb4e26622a88f63979cb5c702
SHA512 37eaa7822e7d47b65ad74e63e3d746cb925406b7f047e37b73b9dfb4deb7d22984f32944eeb229c735547857c12b779a8b9ed94c7ae2c5794a2b5d0653bdef8f
SSDEEP 6144:ObWIlZL9A2lYKRaFDR8Ys9jf1uRjMgU0:OaUZBlYJMYRQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 348KB

file.exe

IMPHASH adf05e4ae4084c6bf3a2c6a5da309837
SHA256 5f85758bb282680a9e3fcaa5676eaa25eb33703ae01954becfa883f6b47640da
MD5 3f1a0654b8a8914613e2e1476d39e9a8
SHA1 877001d5fbf91c6cb4e26622a88f63979cb5c702
SHA512 37eaa7822e7d47b65ad74e63e3d746cb925406b7f047e37b73b9dfb4deb7d22984f32944eeb229c735547857c12b779a8b9ed94c7ae2c5794a2b5d0653bdef8f
SSDEEP 6144:ObWIlZL9A2lYKRaFDR8Ys9jf1uRjMgU0:OaUZBlYJMYRQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA CopyFileW GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetProfileIntA GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

IsTokenUntrusted

Sharing