file[.]exe | Triage™

General

Target
file.exe
Size 265KB
Sample221004-zbad4scfgp
SHA256 5838df319bd0e663bb84758a8edf99dd534e3a0010a373d3ff7c3850259e04b8
MD5 45e2f7ceb0b2ba607dfda2f19f66d47e
SHA1 1c70d4e0bd9a8d17ec8c6d101ee35f359f4b471b
SHA512 f1598b349418f13d627c287fcbd2530b3a0f5364c5d3a1afb6629ca89c910e97a7ad8406d5a8990470dafcfebf9b9311f2dc1c1f47d2cc54cc458bf645455a77
SSDEEP 6144:SrwLL82s0dFf0WsOn7G1oaPuzbgwuteElwVf:Sog2pMGqXunnYeE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 265KB

file.exe

IMPHASH 786d17afd21551fd45869191bfebc781
SHA256 5838df319bd0e663bb84758a8edf99dd534e3a0010a373d3ff7c3850259e04b8
MD5 45e2f7ceb0b2ba607dfda2f19f66d47e
SHA1 1c70d4e0bd9a8d17ec8c6d101ee35f359f4b471b
SHA512 f1598b349418f13d627c287fcbd2530b3a0f5364c5d3a1afb6629ca89c910e97a7ad8406d5a8990470dafcfebf9b9311f2dc1c1f47d2cc54cc458bf645455a77
SSDEEP 6144:SrwLL82s0dFf0WsOn7G1oaPuzbgwuteElwVf:Sog2pMGqXunnYeE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30897

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW TransmitCommChar GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetShortPathNameA LoadLibraryA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing