file[.]exe | Triage™

General

Target
file.exe
Size 349KB
Sample221202-zkvreacf22
SHA256 ad875f90c1ea78a8a355201369dda7cdb663b58aaab4fe440ec037abcd17afec
MD5 824aba202ea1976c9f2f73f27ecf0b8d
SHA1 447d35418788671b04c197c9961866224647ffe1
SHA512 a9b0c306b9335d23344de095c8cc8810befa026119972f6af3b745503ed62b23f011b8d76393e3c7c9fe2a0d43e065f7f192ea9541ce81613269108a8ca46ef6
SSDEEP 6144:npuIELLMs+RcGRraT+3CrlULHajVPvM2o9ouRjMgUL:nY1LyRcESrlUL6q2oXRQg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 349KB

file.exe

IMPHASH e66a19ec5b2e0314a0706215def76c78
SHA256 ad875f90c1ea78a8a355201369dda7cdb663b58aaab4fe440ec037abcd17afec
MD5 824aba202ea1976c9f2f73f27ecf0b8d
SHA1 447d35418788671b04c197c9961866224647ffe1
SHA512 a9b0c306b9335d23344de095c8cc8810befa026119972f6af3b745503ed62b23f011b8d76393e3c7c9fe2a0d43e065f7f192ea9541ce81613269108a8ca46ef6
SSDEEP 6144:npuIELLMs+RcGRraT+3CrlULHajVPvM2o9ouRjMgUL:nY1LyRcESrlUL6q2oXRQg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA AddConsoleAliasW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA CopyFileW GetCalendarInfoA LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeW GetACP lstrlenW CreateJobObjectA GetComputerNameA GetProfileIntA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CreateNamedPipeA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetConsoleAliasesW GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

IsTokenUntrusted

Sharing