file[.]exe | Triage™

General

Target
file.exe
Size 266KB
Sample221004-sbkrhsbfbj
SHA256 234c747d70afbcecded90db4e715e77ffaa233c461820dc687b054ed7966bd0c
MD5 e2772afbbdac726fe0710010f9eebd0f
SHA1 934632fc9f8a69d5dae63a071c769334e743a182
SHA512 c9c65f45b767ddccb9f882b699570770f018bd88222ef8aa48a9b64a6857bbc2f5e0b3bf27891a0ea5ef9bab2a47580ab125b10fa62eb22b1375115752cf961b
SSDEEP 3072:0XhA49L/ILDtASaGgn6L445URBD/mg4aRuLpKq5EWrxpzbgqru6YupZa9uD6Vdyo:w7SLsn6WRBDjhR6L5Euzbgwu6XwVfh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 266KB

file.exe

IMPHASH 6a3e69f98ce51d1033b8534b92278a9c
SHA256 234c747d70afbcecded90db4e715e77ffaa233c461820dc687b054ed7966bd0c
MD5 e2772afbbdac726fe0710010f9eebd0f
SHA1 934632fc9f8a69d5dae63a071c769334e743a182
SHA512 c9c65f45b767ddccb9f882b699570770f018bd88222ef8aa48a9b64a6857bbc2f5e0b3bf27891a0ea5ef9bab2a47580ab125b10fa62eb22b1375115752cf961b
SSDEEP 3072:0XhA49L/ILDtASaGgn6L445URBD/mg4aRuLpKq5EWrxpzbgqru6YupZa9uD6Vdyo:w7SLsn6WRBDjhR6L5Euzbgwu6XwVfh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30909

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointW SetSystemTimeAdjustment FindNextFileW FindResourceExW AddVectoredExceptionHandler BeginUpdateResourceW GetConsoleTitleW TransmitCommChar GetCPInfoExA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA EnumResourceTypesW GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesA GetVolumePathNameA GetConsoleAliasW FindFirstChangeNotificationW GetFileType SetFileShortNameW AddAtomW GetProfileIntA SetFileAttributesA AllocConsole SetConsoleCtrlHandler CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeA GetLongPathNameA FoldStringW FindNextFileA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetShortPathNameW LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing