file[.]exe | Triage™

General

Target
file.exe
Size 351KB
Sample221004-cbjlfsgcf5
SHA256 e624b64f0e1bbdf526afe45534f4900222135df0f189496b4a2a3a76dedeaebe
MD5 941c4f4309163952cc116d0be6e7c14d
SHA1 f16768f45d3f03925c53f3f6bee18e1bbb85cb0d
SHA512 ce4fe4ad2b48fc6260a079c7b4c7735bf6a3e003414757f00ea4b0fd51f9d8a72ec40f9c65670baf75ca247a814713f9af4f6151b0a355541b41f99b591a6c62
SSDEEP 6144:PCmEjWqmXBAkWR3r8A1bzjoBbn6a3AGuzbgwuFvZwVf:PPEjW1QR34A1LIbnZ9unn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 351KB

file.exe

IMPHASH b0ca4398c8b46073dbb766630113ab4f
SHA256 e624b64f0e1bbdf526afe45534f4900222135df0f189496b4a2a3a76dedeaebe
MD5 941c4f4309163952cc116d0be6e7c14d
SHA1 f16768f45d3f03925c53f3f6bee18e1bbb85cb0d
SHA512 ce4fe4ad2b48fc6260a079c7b4c7735bf6a3e003414757f00ea4b0fd51f9d8a72ec40f9c65670baf75ca247a814713f9af4f6151b0a355541b41f99b591a6c62
SSDEEP 6144:PCmEjWqmXBAkWR3r8A1bzjoBbn6a3AGuzbgwuFvZwVf:PPEjW1QR34A1LIbnZ9unn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30798

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointW SetSystemTimeAdjustment FindNextFileW FindResourceExW AddVectoredExceptionHandler BeginUpdateResourceW GetConsoleTitleW TransmitCommChar GetCPInfoExA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathA VirtualAlloc GetModuleHandleA GetConsoleAliasW GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA EnumResourceTypesW GetProcAddress SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW SetConsoleCtrlHandler CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeA GetLongPathNameA FindNextFileA OpenWaitableTimerA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW GetSystemDefaultLCID GetLastError VirtualProtect GlobalAlloc WriteConsoleOutputCharacterW LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryCreateFromData

Sharing