file[.]exe | Triage™

General

Target
file.exe
Size 272KB
Sample221005-kywtaseadn
SHA256 3fe0ece966c5e2ebfc4388b2454ed6278028065ef2acd3633f339240c54c4a98
MD5 1b172cbe7ef1ae26be15eb3f5ffbf38f
SHA1 2623ae1694c89cd4553a3f05ddec5aa910a55324
SHA512 d953894bc84e36da7e5f2aa24a55fecb0e5991a7e1ae4ddb6635ec3f5d2637959390fd2d1ad35e316e431dc2def9c143465791a1d2a34e58b14db5c8729caa74
SSDEEP 6144:UiU67ILYxKjcT7LLCtxl8FQ2YI7uzbgwutHANwVf:U167IEQjcfL+XGVunnM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 272KB

file.exe

IMPHASH f11d6ec93fed9360b133057afb1538ad
SHA256 3fe0ece966c5e2ebfc4388b2454ed6278028065ef2acd3633f339240c54c4a98
MD5 1b172cbe7ef1ae26be15eb3f5ffbf38f
SHA1 2623ae1694c89cd4553a3f05ddec5aa910a55324
SHA512 d953894bc84e36da7e5f2aa24a55fecb0e5991a7e1ae4ddb6635ec3f5d2637959390fd2d1ad35e316e431dc2def9c143465791a1d2a34e58b14db5c8729caa74
SSDEEP 6144:UiU67ILYxKjcT7LLCtxl8FQ2YI7uzbgwutHANwVf:U167IEQjcfL+XGVunnM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36534

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameA GetModuleHandleA GlobalGetAtomNameA GetPrivateProfileStringW GetProcAddress SetFileShortNameA FillConsoleOutputCharacterA GetTimeZoneInformation SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaProcessorNode GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameW GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA PeekConsoleInputA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing