file[.]exe | Triage™

General

Target
file.exe
Size 264KB
Sample221004-y7txyscdd6
SHA256 dbcda4bc5f7d98fee706f0ecb73e96397652d5d7c62c5c754ffcda96cb49282c
MD5 636691f07eb964d033adab95b06f4499
SHA1 1b318058e779805be6a88d170bcf6af26b52c954
SHA512 2cb23d7168f41256b44f2618c641706708078c746dc654d509eb86cd3b047bba2b052060f15964dbde1701830e2cce123487bab0d277c286881e8df3a1722b3b
SSDEEP 6144:/imrkNLxLgFulRoVmTWYcp2nTfSuzbgwun6twwVf://rkNtLgF+RoYTBa6TKunn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 264KB

file.exe

IMPHASH 786d17afd21551fd45869191bfebc781
SHA256 dbcda4bc5f7d98fee706f0ecb73e96397652d5d7c62c5c754ffcda96cb49282c
MD5 636691f07eb964d033adab95b06f4499
SHA1 1b318058e779805be6a88d170bcf6af26b52c954
SHA512 2cb23d7168f41256b44f2618c641706708078c746dc654d509eb86cd3b047bba2b052060f15964dbde1701830e2cce123487bab0d277c286881e8df3a1722b3b
SSDEEP 6144:/imrkNLxLgFulRoVmTWYcp2nTfSuzbgwun6twwVf://rkNtLgF+RoYTBa6TKunn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30897

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW TransmitCommChar GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetShortPathNameA LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing