file[.]exe | Triage™

General

Target
file.exe
Size 273KB
Sample221005-kzfhpseadp
SHA256 0285a7b48462a93dc88b1f2df99cf14dc101baf3ccd3b341a7ef334cd2b6a457
MD5 3a104e58fe64817abf88204213dc2040
SHA1 e4c42100e1c01a50553d9536bfa0b3c1f35769bb
SHA512 3755d007bd498defc96f1373658370187c6a636baad78aa34d817639ffe60463514bb976fff75092db90e33a55d2544ea149ea3574efa3235c5045f7b886a7e9
SSDEEP 6144:mHU6DbLjM4XrIvgbu3kwIgJKuzbgwu1JWwVf:m06Db/M4XsGusTunni
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 273KB

file.exe

IMPHASH f11d6ec93fed9360b133057afb1538ad
SHA256 0285a7b48462a93dc88b1f2df99cf14dc101baf3ccd3b341a7ef334cd2b6a457
MD5 3a104e58fe64817abf88204213dc2040
SHA1 e4c42100e1c01a50553d9536bfa0b3c1f35769bb
SHA512 3755d007bd498defc96f1373658370187c6a636baad78aa34d817639ffe60463514bb976fff75092db90e33a55d2544ea149ea3574efa3235c5045f7b886a7e9
SSDEEP 6144:mHU6DbLjM4XrIvgbu3kwIgJKuzbgwu1JWwVf:m06Db/M4XsGusTunni
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36534

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleW EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameA GetModuleHandleA GlobalGetAtomNameA GetPrivateProfileStringW GetProcAddress SetFileShortNameA FillConsoleOutputCharacterA GetTimeZoneInformation SetCalendarInfoW SetComputerNameA GetFileAttributesW GetVolumePathNameA FindFirstChangeNotificationW GetFileType SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaProcessorNode GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameW GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA PeekConsoleInputA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing