file[.]exe | Triage™

General

Target
file.exe
Size 266KB
Sample221004-3c47nachb3
SHA256 2d856cad166f69421da2db2d41ec22f3ca09df54f8dd8b5f4454113379625ac2
MD5 33f4ba2a8c368a2d835b701879cf47f4
SHA1 ef00a2efec08d9a4484c681c0f27f77b17795ebb
SHA512 d0d557dbd0bc5b46527c9bb0a8c1ea9adb6c89bda9da491562db9804b433d6991f8dc813a7768965cc15bfcb30ff5ec420c4f439702ab5654323751b54021d59
SSDEEP 3072:aXhOgpITLrGNQ0n/SU5IAgGd8gPy1e48aeuJVtFWrxpzbgqru1hpZa9uD6VdyhkT:6bmLN0nMBI8h5Je4Tuzbgwu1hwVf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 266KB

file.exe

IMPHASH 786d17afd21551fd45869191bfebc781
SHA256 2d856cad166f69421da2db2d41ec22f3ca09df54f8dd8b5f4454113379625ac2
MD5 33f4ba2a8c368a2d835b701879cf47f4
SHA1 ef00a2efec08d9a4484c681c0f27f77b17795ebb
SHA512 d0d557dbd0bc5b46527c9bb0a8c1ea9adb6c89bda9da491562db9804b433d6991f8dc813a7768965cc15bfcb30ff5ec420c4f439702ab5654323751b54021d59
SSDEEP 3072:aXhOgpITLrGNQ0n/SU5IAgGd8gPy1e48aeuJVtFWrxpzbgqru1hpZa9uD6VdyhkT:6bmLN0nMBI8h5Je4Tuzbgwu1hwVf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30897

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW TransmitCommChar GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetShortPathNameA LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing