file[.]exe | Triage™

General

Target
file.exe
Size 265KB
Sample221004-n7fefsagh8
SHA256 6e238c048c0abb166fdde310f0c3ab7a8c1aa8376cb7bca00bb998209ab23798
MD5 b2214433c37e14ca35c94e01b4029000
SHA1 c6636f22d589241d888bcb3adb890e743ca41670
SHA512 444ab538056c9f818ac1487b8918da1b0b0a44af52f8aac44ab4e83aeb5dba1903c9c00442efd950b08deafbdbeb7342c48ca5c9d4b9f6d86f4f40bebbd25d6a
SSDEEP 3072:EXhTs6qjLjgqc6MFX5PG5EUS5NQeQz9tetqAyZIBXWrxpzbgqruKsO56U1c0pZa+:AyFLgFX19OrUtkuBXuzbgwuKwUJwVfU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 265KB

file.exe

IMPHASH fe8e44e9bcf985b83aaf4b8d099548b9
SHA256 6e238c048c0abb166fdde310f0c3ab7a8c1aa8376cb7bca00bb998209ab23798
MD5 b2214433c37e14ca35c94e01b4029000
SHA1 c6636f22d589241d888bcb3adb890e743ca41670
SHA512 444ab538056c9f818ac1487b8918da1b0b0a44af52f8aac44ab4e83aeb5dba1903c9c00442efd950b08deafbdbeb7342c48ca5c9d4b9f6d86f4f40bebbd25d6a
SSDEEP 3072:EXhTs6qjLjgqc6MFX5PG5EUS5NQeQz9tetqAyZIBXWrxpzbgqruKsO56U1c0pZa+:AyFLgFX19OrUtkuBXuzbgwuKwUJwVfU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30909

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointW SetSystemTimeAdjustment FindNextFileW FindResourceExW AddVectoredExceptionHandler BeginUpdateResourceW GetConsoleTitleW TransmitCommChar GetCPInfoExA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterA GetModuleHandleA GetShortPathNameW GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA EnumResourceTypesW GetProcAddress SetFileShortNameW SetCalendarInfoW SetComputerNameW GetFileAttributesA GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameA AddAtomW GetProfileIntA SetFileAttributesA AllocConsole SetConsoleCtrlHandler CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeA GetLongPathNameA FindNextFileA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetConsoleAliasW LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing