file[.]exe | Triage™

General

Target
file.exe
Size 414KB
Sample220927-xyssvsfdck
SHA256 252f7acdf228a6ee25eae2229cfb3d10c9f5e4bfa3a7e7acaf98b3651218477a
MD5 7f0698dd1d6b4cf4256dfe3c09687051
SHA1 55e61078329b17f9871b4d87c94edca5d1f1c791
SHA512 691a4479a3744f4095875f174d0ef430b796e2c5025c843ee752740369fb638c5aa0c7a2bce3f3c629b943d4222edf00aa713e0d5fa710253b29bf6ca645d5bb
SSDEEP 6144:OQ4jQLRDj+bD1/QNnHVSB41XzY39AY/EEEEW06nigabwVfs:OQ4ARDKD1/Qd1u41zY39/EEEEX6iB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 414KB

file.exe

IMPHASH beddc31176fbd42897a58cb208f48486
SHA256 252f7acdf228a6ee25eae2229cfb3d10c9f5e4bfa3a7e7acaf98b3651218477a
MD5 7f0698dd1d6b4cf4256dfe3c09687051
SHA1 55e61078329b17f9871b4d87c94edca5d1f1c791
SHA512 691a4479a3744f4095875f174d0ef430b796e2c5025c843ee752740369fb638c5aa0c7a2bce3f3c629b943d4222edf00aa713e0d5fa710253b29bf6ca645d5bb
SSDEEP 6144:OQ4jQLRDj+bD1/QNnHVSB41XzY39AY/EEEEW06nigabwVfs:OQ4ARDKD1/Qd1u41zY39/EEEEX6iB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36921

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeW FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GetModuleHandleA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA GlobalGetAtomNameA LoadLibraryA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRevokeMallocSpy

Sharing