file[.]exe | Triage™

General

Target
file.exe
Size 265KB
Sample221004-gcwdvseca2
SHA256 173e51e9f7111aa6f6b989e19202cfe07b919e306df81c25dc90fb5ec3dfa3a0
MD5 e07c462a9f569bf5e636c93d90df7c2a
SHA1 d71fecb76036ca55c37e25372357a357064722df
SHA512 539958231ddc4c1f087c29ef93a2dc66a33f589f4695aec1a1c0d33dde14653b2f6c4e4ad46cfa603176a0becdf88e809f6fee075b01141ca34b32b237d8938d
SSDEEP 3072:YXh7cR3Qe1FLqy785f6DnRWH17bnLONez2Bk29WrxpzbgqruYwOtz8i3lpZa9uDe:s6lS76YbKNez+9uzbgwuYwOtA2lwVfX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 265KB

file.exe

IMPHASH 248971fcc75411b99858f93555bfda6c
SHA256 173e51e9f7111aa6f6b989e19202cfe07b919e306df81c25dc90fb5ec3dfa3a0
MD5 e07c462a9f569bf5e636c93d90df7c2a
SHA1 d71fecb76036ca55c37e25372357a357064722df
SHA512 539958231ddc4c1f087c29ef93a2dc66a33f589f4695aec1a1c0d33dde14653b2f6c4e4ad46cfa603176a0becdf88e809f6fee075b01141ca34b32b237d8938d
SSDEEP 3072:YXh7cR3Qe1FLqy785f6DnRWH17bnLONez2Bk29WrxpzbgqruYwOtz8i3lpZa9uDe:s6lS76YbKNez+9uzbgwuYwOtA2lwVfX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30862

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointW SetSystemTimeAdjustment FindNextFileW FindResourceExW AddVectoredExceptionHandler BeginUpdateResourceW GetConsoleTitleW TransmitCommChar GetCPInfoExA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA EnumResourceTypesW GetProcAddress SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW GetProfileIntA SetFileAttributesA AllocConsole SetConsoleCtrlHandler CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeA GetLongPathNameA FindNextFileA OpenWaitableTimerA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW GetSystemDefaultLCID GetLastError VirtualProtect GlobalAlloc GetShortPathNameW LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing