file[.]exe | Triage™

General

Target
file.exe
Size 265KB
Sample221004-sefa7sbfcl
SHA256 dab60c2391d8adb01bc1dee7356fc2ea7845d92f6a3ba1d0e56cb1ee7d3a9549
MD5 9bcba329d22d73e54dbae492dd577f04
SHA1 6c524a5b0d32ec6abe3f0b48751e83f79b939c9e
SHA512 b97f83040560a2172466413e2595d83525817a9f989435cc2b0c6e64fb547e8dd8943cbe9ad3f759b541693134dfd6b80544cc20daf6aa838871185f2279a3d2
SSDEEP 6144:k7tLzFCAx38Sb4IV/JpyuzbgwuUay24gwVfh:kZvFCAxMSV0unnr7NN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 265KB

file.exe

IMPHASH 6a3e69f98ce51d1033b8534b92278a9c
SHA256 dab60c2391d8adb01bc1dee7356fc2ea7845d92f6a3ba1d0e56cb1ee7d3a9549
MD5 9bcba329d22d73e54dbae492dd577f04
SHA1 6c524a5b0d32ec6abe3f0b48751e83f79b939c9e
SHA512 b97f83040560a2172466413e2595d83525817a9f989435cc2b0c6e64fb547e8dd8943cbe9ad3f759b541693134dfd6b80544cc20daf6aa838871185f2279a3d2
SSDEEP 6144:k7tLzFCAx38Sb4IV/JpyuzbgwuUay24gwVfh:kZvFCAxMSV0unnr7NN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30909

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointW SetSystemTimeAdjustment FindNextFileW FindResourceExW AddVectoredExceptionHandler BeginUpdateResourceW GetConsoleTitleW TransmitCommChar GetCPInfoExA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA EnumResourceTypesW GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesA GetVolumePathNameA GetConsoleAliasW FindFirstChangeNotificationW GetFileType SetFileShortNameW AddAtomW GetProfileIntA SetFileAttributesA AllocConsole SetConsoleCtrlHandler CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeA GetLongPathNameA FoldStringW FindNextFileA ResetEvent GlobalUnfix GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetShortPathNameW LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing