file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample221005-epmldadcd8
SHA256 eede6d5ec55cb31d875c5f746f7f66304babf2195cbaa4aeb860b785385ca7b6
MD5 f4518ef369fb1768bb2df4c0e4a43d4f
SHA1 b2e1221e65173d6bc149f0ada100b208fac29434
SHA512 b6fb52c1729a1990148ee5829baa7d81c1ec7fd9ef6002ea9f269cada1ab3ea9d5c2e14bad3132f3033a031f6485c4a9f1078a634c2a03c24aaec87bccaf8eb3
SSDEEP 6144:QwAmLinH6XYTVQr7febSJXPHBaF5QnEgdtva2uzbgwuuhHwVf:QwHWnaXYpQ/eU/w8rDunn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH 5a1761ccee7edb3c156d0ce011cc189e
SHA256 eede6d5ec55cb31d875c5f746f7f66304babf2195cbaa4aeb860b785385ca7b6
MD5 f4518ef369fb1768bb2df4c0e4a43d4f
SHA1 b2e1221e65173d6bc149f0ada100b208fac29434
SHA512 b6fb52c1729a1990148ee5829baa7d81c1ec7fd9ef6002ea9f269cada1ab3ea9d5c2e14bad3132f3033a031f6485c4a9f1078a634c2a03c24aaec87bccaf8eb3
SSDEEP 6144:QwAmLinH6XYTVQr7febSJXPHBaF5QnEgdtva2uzbgwuuhHwVf:QwHWnaXYpQ/eU/w8rDunn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36321

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA GetPrivateProfileStringW PeekConsoleInputA GlobalGetAtomNameA GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaProcessorNode GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameW GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetShortPathNameA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing