file[.]exe | Triage™

General

Target
file.exe
Size 265KB
Sample221004-e9yjdaced9
SHA256 3b227589bd920950b14e4bdfd0a1ea477138c0dd88f99c2f44dd654fc19d7662
MD5 77a78d4e64b9c356cb4a81b9b7e664cc
SHA1 d0a38ac5f980be2bc17f27ad28e4c9e420fd73e8
SHA512 f1c820280b17d2c30f238348947b33f71784fd48dbfd19519039d65958ec443c28a2ba57f3515d79f9527431f97b1384d316e5b916f06558419da4f65b19a6af
SSDEEP 3072:DXh0QkRKp42TlWUx785Ubk0BqbOPt3MxykcmRtfTaANh6WrxpzbgqrujeJSpZa9M:7+YpFPbkfSlAxrRtfGK6uzbgwuj/wVf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 265KB

file.exe

IMPHASH 248971fcc75411b99858f93555bfda6c
SHA256 3b227589bd920950b14e4bdfd0a1ea477138c0dd88f99c2f44dd654fc19d7662
MD5 77a78d4e64b9c356cb4a81b9b7e664cc
SHA1 d0a38ac5f980be2bc17f27ad28e4c9e420fd73e8
SHA512 f1c820280b17d2c30f238348947b33f71784fd48dbfd19519039d65958ec443c28a2ba57f3515d79f9527431f97b1384d316e5b916f06558419da4f65b19a6af
SSDEEP 3072:DXh0QkRKp42TlWUx785Ubk0BqbOPt3MxykcmRtfTaANh6WrxpzbgqrujeJSpZa9M:7+YpFPbkfSlAxrRtfGK6uzbgwuj/wVf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30862

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointW SetSystemTimeAdjustment FindNextFileW FindResourceExW AddVectoredExceptionHandler BeginUpdateResourceW GetConsoleTitleW TransmitCommChar GetCPInfoExA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA EnumResourceTypesW GetProcAddress SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW GetProfileIntA SetFileAttributesA AllocConsole SetConsoleCtrlHandler CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeA GetLongPathNameA FindNextFileA OpenWaitableTimerA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW GetSystemDefaultLCID GetLastError VirtualProtect GlobalAlloc GetShortPathNameW LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing