file[.]exe | Triage™

General

Target
file.exe
Size 352KB
Sample221004-dxhrqaafbm
SHA256 952d69260bc696bf45afe1ee50a013fc3769979f80dcb00fabce439fbc3261b5
MD5 034e4811c0deea46365ccf40af90e341
SHA1 eda3cbe5f287ff2c8f7105298827a1b45cc9d01b
SHA512 43b8ac8d80a837c992b21d8c5ef7385e4d4b11174033091b319b33add19bcbfa155e28c1913c45135374186ee008938858c001de79157bb3addf61481213a572
SSDEEP 6144:mYfrZqZRhxMaXgx7mwfsw8ecXNdifbuzbgwubwVf:mgroRVXgVmwfsecX7Kunn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 352KB

file.exe

IMPHASH b0ca4398c8b46073dbb766630113ab4f
SHA256 952d69260bc696bf45afe1ee50a013fc3769979f80dcb00fabce439fbc3261b5
MD5 034e4811c0deea46365ccf40af90e341
SHA1 eda3cbe5f287ff2c8f7105298827a1b45cc9d01b
SHA512 43b8ac8d80a837c992b21d8c5ef7385e4d4b11174033091b319b33add19bcbfa155e28c1913c45135374186ee008938858c001de79157bb3addf61481213a572
SSDEEP 6144:mYfrZqZRhxMaXgx7mwfsw8ecXNdifbuzbgwubwVf:mgroRVXgVmwfsecX7Kunn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30798

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointW SetSystemTimeAdjustment FindNextFileW FindResourceExW AddVectoredExceptionHandler BeginUpdateResourceW GetConsoleTitleW TransmitCommChar GetCPInfoExA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathA VirtualAlloc GetModuleHandleA GetConsoleAliasW GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA EnumResourceTypesW GetProcAddress SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW SetConsoleCtrlHandler CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeA GetLongPathNameA FindNextFileA OpenWaitableTimerA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW GetSystemDefaultLCID GetLastError VirtualProtect GlobalAlloc WriteConsoleOutputCharacterW LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryCreateFromData

Sharing