file[.]exe | Triage™

General

Target
file.exe
Size 367KB
Sample221005-sk614seff7
SHA256 a120a87049bbc78fe6651ee4b9602c5cc05666e1a7db4ac8e53c0ecbc2fd06e7
MD5 a65f292880c2e8eb18d8b3f8686c9ed6
SHA1 22cda93e3435130c76e5afb591815b1e67d9eb50
SHA512 518153a542e15e589d51172ea53ab1e8bb502f14526175e60461a4f17bc1ae58507c5f1433e9d2bfb5164c6caabbabd0d17602eb5870f76faeb4c1b9c145d3a4
SSDEEP 6144:sRFGKkqeLCPp0Cz2nx14kr26ZAE+q67xrc49sFpYUuzbgwuhvbAwwVfU:sRoqe2Pp0CCnxHr2xE+q74Opunnm8Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 367KB

file.exe

IMPHASH 42a501f928c5dd1dcc273017d496927f
SHA256 a120a87049bbc78fe6651ee4b9602c5cc05666e1a7db4ac8e53c0ecbc2fd06e7
MD5 a65f292880c2e8eb18d8b3f8686c9ed6
SHA1 22cda93e3435130c76e5afb591815b1e67d9eb50
SHA512 518153a542e15e589d51172ea53ab1e8bb502f14526175e60461a4f17bc1ae58507c5f1433e9d2bfb5164c6caabbabd0d17602eb5870f76faeb4c1b9c145d3a4
SSDEEP 6144:sRFGKkqeLCPp0Cz2nx14kr26ZAE+q67xrc49sFpYUuzbgwuhvbAwwVfU:sRoqe2Pp0CCnxHr2xE+q74Opunnm8Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

36550

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleA EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetModuleHandleA GlobalGetAtomNameA GetPrivateProfileStringW GetProcAddress GetFileType FillConsoleOutputCharacterA GetTimeZoneInformation SetCalendarInfoW SetComputerNameW GetFileAttributesW FindFirstChangeNotificationW GetVolumePathNameW FindFirstChangeNotificationA GetFileAttributesExW SetFileShortNameW DeleteFileA GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateMutexA GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA PeekConsoleInputA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing