file[.]exe | Triage™

General

Target
file.exe
Size 271KB
Sample221005-henx8sdgem
SHA256 0d82f707af6ea1603e21f0a4ef4cbd2c03b1c1608f02eddebd8adb0b2b1d7d2f
MD5 2ee58cfacdd6401e80cb734b46d0c1df
SHA1 b82f9b5a66c67d3c3c22aac40c8880c4b2270822
SHA512 b06abf906bd5a2ace78242f3240c1bbd839e672febce6778cf24404f0f7844cf1b2171a294c34a7a6b806a54d9e6db916564b4c0a8b0908e3a930f8c2bb809ad
SSDEEP 6144:s3E8KtLXCj/7zbhvzpYssIuzbgwu0mgMLwVf:s3fKtLCj/73hvz6srunn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 271KB

file.exe

IMPHASH 2ca9b2784e228d8f4506632b2b5c62ed
SHA256 0d82f707af6ea1603e21f0a4ef4cbd2c03b1c1608f02eddebd8adb0b2b1d7d2f
MD5 2ee58cfacdd6401e80cb734b46d0c1df
SHA1 b82f9b5a66c67d3c3c22aac40c8880c4b2270822
SHA512 b06abf906bd5a2ace78242f3240c1bbd839e672febce6778cf24404f0f7844cf1b2171a294c34a7a6b806a54d9e6db916564b4c0a8b0908e3a930f8c2bb809ad
SSDEEP 6144:s3E8KtLXCj/7zbhvzpYssIuzbgwu0mgMLwVf:s3fKtLCj/73hvz6srunn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36502

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetModuleHandleA PeekConsoleInputA GlobalGetAtomNameA GetPrivateProfileStringW GetProcAddress SetFileShortNameA SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaProcessorNode GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameW GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA GetShortPathNameA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing