file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample221005-e8s79sdda5
SHA256 0de56e567b2d39e8a6a22cfdabadf9396975ce34acfbbb90e55052dd30dc18b9
MD5 bda263ea4f1681added182faaf815513
SHA1 d610b8399e7107ea17a9bca2ce2b4191a65b66f4
SHA512 10563bdf8c2126f720f3c0843c58d03d780f8d123b6654f678fbf31f5cace183e65de2c4220ca27edd78f52fd1119c3e37758e00089b71192746cec1e1b40960
SSDEEP 6144:sPu8KxLfsGgsRxtkRQStRTO9WOnqwuzbgwuE0wwVf:sPtKxAGgsL2QSXqntunn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH 2ca9b2784e228d8f4506632b2b5c62ed
SHA256 0de56e567b2d39e8a6a22cfdabadf9396975ce34acfbbb90e55052dd30dc18b9
MD5 bda263ea4f1681added182faaf815513
SHA1 d610b8399e7107ea17a9bca2ce2b4191a65b66f4
SHA512 10563bdf8c2126f720f3c0843c58d03d780f8d123b6654f678fbf31f5cace183e65de2c4220ca27edd78f52fd1119c3e37758e00089b71192746cec1e1b40960
SSDEEP 6144:sPu8KxLfsGgsRxtkRQStRTO9WOnqwuzbgwuE0wwVf:sPtKxAGgsL2QSXqntunn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36502

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA PeekConsoleInputA GlobalGetAtomNameA GetPrivateProfileStringW GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaProcessorNode GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameW GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA GetShortPathNameA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing