file[.]exe | Triage™

General

Target
file.exe
Size 349KB
Sample221202-w92dpscf36
SHA256 ec6338fe5c4c83839e0eddc69d4c0fcb9a2556c91ca06771ae502fa5a9318ab7
MD5 d9b3e15487f4209bcc4a0fa76d608f28
SHA1 412faed1700e653d52316f6072f1520b99f747b9
SHA512 cd1ab1c4c25d801e51b8469474601edf468273a17d42e1a227d86aed21835a2284367d343a1f6c5cbd5ec4a45234b28bddb34cf0601f6843b11f6ea3c7774dad
SSDEEP 6144:S29IOL5AiVEpPBpCiYAcfB7WYmezk1ekPuKlpuRjMgU:SclVVElCAQ9FXYXURQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 349KB

file.exe

IMPHASH adf05e4ae4084c6bf3a2c6a5da309837
SHA256 ec6338fe5c4c83839e0eddc69d4c0fcb9a2556c91ca06771ae502fa5a9318ab7
MD5 d9b3e15487f4209bcc4a0fa76d608f28
SHA1 412faed1700e653d52316f6072f1520b99f747b9
SHA512 cd1ab1c4c25d801e51b8469474601edf468273a17d42e1a227d86aed21835a2284367d343a1f6c5cbd5ec4a45234b28bddb34cf0601f6843b11f6ea3c7774dad
SSDEEP 6144:S29IOL5AiVEpPBpCiYAcfB7WYmezk1ekPuKlpuRjMgU:SclVVElCAQ9FXYXURQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA CopyFileW GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetProfileIntA GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

IsTokenUntrusted

Sharing