file[.]exe | Triage™

General

Target
file.exe
Size 358KB
Sample221005-2av1jagahn
SHA256 4e51e6825924a901a82783b4bc56ded96bcd700308ea59565065654ed6d11cb6
MD5 ec0b981f79cc9f9c74a8052fd3c372da
SHA1 20c49b24db909161c72fa441252ee46d14036fbf
SHA512 18d9003c4a8ceb8d4b656a6b3861e71a01b5e28ae2a9c23ab5670e5ffa5ef453784fa786b28846d83faf38c82be952cc13cc24355a0ee3d7f01809a1ed335c6d
SSDEEP 6144:tcCN6nLxckD+p5T9QW/r6sYBUfHVhTbWgDuzbgwu+wVfUPk:tcAKtc++HTeW/r6sYBUvV3unntc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 358KB

file.exe

IMPHASH 88ae0b1b86ca75a326fa794c920a20b9
SHA256 4e51e6825924a901a82783b4bc56ded96bcd700308ea59565065654ed6d11cb6
MD5 ec0b981f79cc9f9c74a8052fd3c372da
SHA1 20c49b24db909161c72fa441252ee46d14036fbf
SHA512 18d9003c4a8ceb8d4b656a6b3861e71a01b5e28ae2a9c23ab5670e5ffa5ef453784fa786b28846d83faf38c82be952cc13cc24355a0ee3d7f01809a1ed335c6d
SSDEEP 6144:tcCN6nLxckD+p5T9QW/r6sYBUfHVhTbWgDuzbgwu+wVfUPk:tcAKtc++HTeW/r6sYBUvV3unntc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28991

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole GetConsoleAliasExesLengthA SetConsoleTextAttribute GetConsoleAliasA WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW SetCommTimeouts EnumResourceTypesA GetVolumePathNameW FindResourceExA SetFileShortNameW GetVolumeInformationA LoadLibraryW SetVolumeMountPointA GetSystemTimeAdjustment GetVersionExW GetConsoleAliasW GetFileAttributesW GetGeoInfoA GetTimeZoneInformation GetBinaryTypeW WritePrivateProfileStringW GetShortPathNameA GetProfileIntA GetLastError GetProcAddress GetLongPathNameA VirtualAlloc IsBadHugeWritePtr WriteConsoleOutputCharacterW SearchPathW OpenWaitableTimerA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW GetFileType AddVectoredExceptionHandler CreateEventW BeginUpdateResourceA AddAtomA FoldStringW EnumResourceTypesW GlobalWire GetModuleFileNameA FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW GetConsoleTitleW VirtualProtect GetFileAttributesExW PeekConsoleInputA GetCPInfoExA ReadConsoleInputW DeleteFileW SetFileAttributesW DeleteFileA GlobalGetAtomNameA FindFirstChangeNotificationW GetComputerNameA FillConsoleOutputCharacterA ResetEvent GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException ReadFile HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

advapi32

DeregisterEventSource CloseEventLog

ole32

OleQueryLinkFromData

Sharing