file[.]exe | Triage™

General

Target
file.exe
Size 280KB
Sample221005-pp2qeaece5
SHA256 3b0a3f77c6c6acfb24d97ec169eb0f976914af7371060ad1231c21a3c2e8b4b2
MD5 18d87ffe360cfd92cb65a2992e98c482
SHA1 b6047b777d250cbe8161eb5be1322168a0a9f3c9
SHA512 a763a19987bb5282f956793fbf7f13e293a08d3c0b40f7b36ce94d31e703c83a395442c87de2cd08d1a9b88129809d8dea71547ad7cb2cefa6abe4549e614025
SSDEEP 6144:s1DkqDLLYz554M0uisqxQquzbgwufkqWwVfU:s1YqDvYzAM0Xunn3/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 280KB

file.exe

IMPHASH 42a501f928c5dd1dcc273017d496927f
SHA256 3b0a3f77c6c6acfb24d97ec169eb0f976914af7371060ad1231c21a3c2e8b4b2
MD5 18d87ffe360cfd92cb65a2992e98c482
SHA1 b6047b777d250cbe8161eb5be1322168a0a9f3c9
SHA512 a763a19987bb5282f956793fbf7f13e293a08d3c0b40f7b36ce94d31e703c83a395442c87de2cd08d1a9b88129809d8dea71547ad7cb2cefa6abe4549e614025
SSDEEP 6144:s1DkqDLLYz554M0uisqxQquzbgwufkqWwVfU:s1YqDvYzAM0Xunn3/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36550

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleA EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetModuleHandleA GlobalGetAtomNameA GetPrivateProfileStringW GetProcAddress GetFileType FillConsoleOutputCharacterA GetTimeZoneInformation SetCalendarInfoW SetComputerNameW GetFileAttributesW FindFirstChangeNotificationW GetVolumePathNameW FindFirstChangeNotificationA GetFileAttributesExW SetFileShortNameW DeleteFileA GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateMutexA GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA PeekConsoleInputA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing