file[.]exe | Triage™

General

Target
file.exe
Size 273KB
Sample221005-bzn1eaddam
SHA256 b0fb6136f4bf2cd63a481e28466174f66f9c0132f35e4b71f7e5e7fa318757a9
MD5 41d9c661ae072653cf7120cf4c00e7a5
SHA1 80e8d85dd378a1f92b9c4d73fee59f1bda6706d6
SHA512 cc7a7bf21fac7547a3b786e84947e0a769ab202accb14150b844a54e4d881e44a08cb8bcdd67be45b1f0e1fd8451f5397afc00aaa323cffe5147acac5d2d3d7d
SSDEEP 6144:YZz8LTzTclP/+0pt3zAVzt/byytyuzbgwus3q0hwVf:YZonzAt/t6z5ypunn5q
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 273KB

file.exe

IMPHASH 06b11596a392db16bd545d9d13243412
SHA256 b0fb6136f4bf2cd63a481e28466174f66f9c0132f35e4b71f7e5e7fa318757a9
MD5 41d9c661ae072653cf7120cf4c00e7a5
SHA1 80e8d85dd378a1f92b9c4d73fee59f1bda6706d6
SHA512 cc7a7bf21fac7547a3b786e84947e0a769ab202accb14150b844a54e4d881e44a08cb8bcdd67be45b1f0e1fd8451f5397afc00aaa323cffe5147acac5d2d3d7d
SSDEEP 6144:YZz8LTzTclP/+0pt3zAVzt/byytyuzbgwus3q0hwVf:YZonzAt/t6z5ypunn5q
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36321

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW TransmitCommChar GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaHighestNodeNumber GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetShortPathNameA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing