file[.]exe | Triage™

General

Target
file.exe
Size 360KB
Sample221005-m989waedbj
SHA256 2382cd4d33346b25dbb6fe22aa56ec17744518e8bdcd02238ff91aa835c1274c
MD5 6fa2e2fbc27d6146213129d39a616c82
SHA1 f557da2f668aa12e67bad7fd83c24f1fe84bc91c
SHA512 975818b00b912d1c975a8ab96b0171cf2f238689e35e8d04963c5b79ae2b35e2cb25dfc73dd49c9c52f8d1ca8a80ae2a80c94fabf42ac9578d95dc28af88e30d
SSDEEP 6144:5QfqWOY9aLgPckV1jNWqqw8Nr3G/WxzvBISa+BuzbgwuPawVf:54qWmcPckJWqqws34Cb04unn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 360KB

file.exe

IMPHASH b4ad18074a7b3506108dd3c6e557328d
SHA256 2382cd4d33346b25dbb6fe22aa56ec17744518e8bdcd02238ff91aa835c1274c
MD5 6fa2e2fbc27d6146213129d39a616c82
SHA1 f557da2f668aa12e67bad7fd83c24f1fe84bc91c
SHA512 975818b00b912d1c975a8ab96b0171cf2f238689e35e8d04963c5b79ae2b35e2cb25dfc73dd49c9c52f8d1ca8a80ae2a80c94fabf42ac9578d95dc28af88e30d
SSDEEP 6144:5QfqWOY9aLgPckV1jNWqqw8Nr3G/WxzvBISa+BuzbgwuPawVf:54qWmcPckJWqqws34Cb04unn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36582

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleA EnumCalendarInfoExA LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA PeekConsoleInputA GetModuleHandleA GetPrivateProfileStringW GetProcAddress SetFileShortNameA GetFileType FillConsoleOutputCharacterA GetTimeZoneInformation SetCalendarInfoW SetComputerNameW GetFileAttributesW GetVolumePathNameW FindFirstChangeNotificationW GetFileAttributesExW SetFileShortNameW FindFirstFileExW GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateJobObjectA CreateMutexA GetNumaProcessorNode GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameW GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA LoadLibraryA GlobalGetAtomNameA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing