file[.]exe | Triage™

General

Target
file.exe
Size 352KB
Sample221203-tynblaff76
SHA256 ec2fed17bb968849b8ff49931a230621191e2fc75e2aa5b7cde12059a0d259ab
MD5 d44d9d3e497ed82967209c67c4ad3456
SHA1 ece1d7cd85fe80439bd47d66b62f7ae8e2f1ffa3
SHA512 257f6c48dfe5f52b3d5862a836619a066485ce4f896106471f570903b91e57250b2d81c6cb4a8d71b1173fde694fe03b920c12be831b241d99d8593cd20997b9
SSDEEP 6144:OMLVAveWVS/TJSVMFntLknMW2RqnzGJ7Y:OMJAvTkFuMW3C7Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 352KB

file.exe

IMPHASH b483b26987043bea9f5c33199690f1db
SHA256 ec2fed17bb968849b8ff49931a230621191e2fc75e2aa5b7cde12059a0d259ab
MD5 d44d9d3e497ed82967209c67c4ad3456
SHA1 ece1d7cd85fe80439bd47d66b62f7ae8e2f1ffa3
SHA512 257f6c48dfe5f52b3d5862a836619a066485ce4f896106471f570903b91e57250b2d81c6cb4a8d71b1173fde694fe03b920c12be831b241d99d8593cd20997b9
SSDEEP 6144:OMLVAveWVS/TJSVMFntLknMW2RqnzGJ7Y:OMJAvTkFuMW3C7Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW CreateNamedPipeW GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW FillConsoleOutputCharacterA GetACP lstrlenW GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetBinaryTypeW GetFullPathNameW HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo GetOEMCP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing