file[.]exe | Triage™

General

Target
file.exe
Size 271KB
Sample221005-v1zcbafac3
SHA256 be55e7fd8d6aa7a21162984d7aff6814de9961b68d1e6fd91d8be7622743ba55
MD5 375ff547488b9713418f2eee5ead773f
SHA1 981264464c47623be240965aac54d4dc71f79450
SHA512 3886aa1ad11feaa8f81d6498ba906ba5fd649fe2a7ab66f9b81fc86f363a07f7bdaaf780885cb42dda0eaf83cba87a841258f19d61ae95ee4d449242e6d58043
SSDEEP 6144:N1PjMbLivAoFbYLaHumuzbgwuiZLPa7wVfUl:NibOvAsjunntZCl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 271KB

file.exe

IMPHASH 2a596efd3ece07541c870212462e1f62
SHA256 be55e7fd8d6aa7a21162984d7aff6814de9961b68d1e6fd91d8be7622743ba55
MD5 375ff547488b9713418f2eee5ead773f
SHA1 981264464c47623be240965aac54d4dc71f79450
SHA512 3886aa1ad11feaa8f81d6498ba906ba5fd649fe2a7ab66f9b81fc86f363a07f7bdaaf780885cb42dda0eaf83cba87a841258f19d61ae95ee4d449242e6d58043
SSDEEP 6144:N1PjMbLivAoFbYLaHumuzbgwuiZLPa7wVfUl:NibOvAsjunntZCl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29039

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole GetConsoleAliasExesLengthA SetConsoleTextAttribute GetConsoleAliasA WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW SetCommTimeouts EnumResourceTypesA GetVolumePathNameW FindResourceExA GlobalAlloc SetFileShortNameW GetVolumeInformationA LoadLibraryW SetVolumeMountPointA GetSystemTimeAdjustment GetVersionExW GetConsoleAliasW GetFileAttributesW GetGeoInfoA GetTimeZoneInformation GetBinaryTypeW WritePrivateProfileStringW GetShortPathNameA GetProfileIntA GetLastError GetProcAddress GetLongPathNameA VirtualAlloc IsBadHugeWritePtr GlobalGetAtomNameA WriteConsoleOutputCharacterW ResetEvent OpenWaitableTimerA LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW SetCalendarInfoW GetFileType AddVectoredExceptionHandler CreateEventW BeginUpdateResourceA AddAtomA FoldStringW EnumResourceTypesW GlobalWire GetModuleFileNameA FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW GetConsoleTitleW VirtualProtect GetFileAttributesExW PeekConsoleInputA GetCPInfoExA ReadConsoleInputW DeleteFileW DeleteFileA FindFirstChangeNotificationW GetComputerNameA SearchPathW FillConsoleOutputCharacterA SetFileAttributesA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException ReadFile HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

advapi32

CloseEventLog DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing