file[.]exe | Triage™

General

Target
file.exe
Size 279KB
Sample221005-pvlldaeefr
SHA256 8efce4e7e3c1a753e03a7726011103bcd54c1c27f41acc01a48a21c8bdf0eb63
MD5 0deda5a40fdb8fd510f497b180d5026a
SHA1 542c93dec52734061f6a8e54c3c3117d99fe807e
SHA512 f599208b237d3c52d4b09ebe9a4b0b6c5f78375d39f0acc384591974e4c2d89bf6db6dbe4c6de6ca8efa932d56c13d73182b9684e894beaa185be65510200c6b
SSDEEP 6144:s1hkqaLKKrv/zeHCdQoBojuzbgwumjpjwVfU:s1OqaVrvL2CNEunnBN5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 279KB

file.exe

IMPHASH 42a501f928c5dd1dcc273017d496927f
SHA256 8efce4e7e3c1a753e03a7726011103bcd54c1c27f41acc01a48a21c8bdf0eb63
MD5 0deda5a40fdb8fd510f497b180d5026a
SHA1 542c93dec52734061f6a8e54c3c3117d99fe807e
SHA512 f599208b237d3c52d4b09ebe9a4b0b6c5f78375d39f0acc384591974e4c2d89bf6db6dbe4c6de6ca8efa932d56c13d73182b9684e894beaa185be65510200c6b
SSDEEP 6144:s1hkqaLKKrv/zeHCdQoBojuzbgwumjpjwVfU:s1OqaVrvL2CNEunnBN5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36550

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleA EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetModuleHandleA GlobalGetAtomNameA GetPrivateProfileStringW GetProcAddress GetFileType FillConsoleOutputCharacterA GetTimeZoneInformation SetCalendarInfoW SetComputerNameW GetFileAttributesW FindFirstChangeNotificationW GetVolumePathNameW FindFirstChangeNotificationA GetFileAttributesExW SetFileShortNameW DeleteFileA GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateMutexA GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA PeekConsoleInputA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing