file[.]exe | Triage™

General

Target
file.exe
Size 271KB
Sample221005-x9hf9sfch8
SHA256 76ca610295ef6d9ee0a8bd3a3530b7b69f5e1762f6e378c5d7fa07bedf1ec5c8
MD5 7aad2009672f529d828b92e4d9f37713
SHA1 e89de92ce462b6a0f13e83846f022d0e46e2ac41
SHA512 d6f2988e5de723be33dc4751f01c2074fbfc9c863be325a4346148fb7217a2ac6059af9953978e48d0c840dc9de298d1aa301e29aec90363914d12d06c243150
SSDEEP 6144:SzM8VSLxMHgIN79pXizruzbgwujaiwVfUPk:SzAdMHgIB7X8unnec
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 271KB

file.exe

IMPHASH 88ae0b1b86ca75a326fa794c920a20b9
SHA256 76ca610295ef6d9ee0a8bd3a3530b7b69f5e1762f6e378c5d7fa07bedf1ec5c8
MD5 7aad2009672f529d828b92e4d9f37713
SHA1 e89de92ce462b6a0f13e83846f022d0e46e2ac41
SHA512 d6f2988e5de723be33dc4751f01c2074fbfc9c863be325a4346148fb7217a2ac6059af9953978e48d0c840dc9de298d1aa301e29aec90363914d12d06c243150
SSDEEP 6144:SzM8VSLxMHgIN79pXizruzbgwujaiwVfUPk:SzAdMHgIB7X8unnec
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28991

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole GetConsoleAliasExesLengthA SetConsoleTextAttribute GetConsoleAliasA WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW SetCommTimeouts EnumResourceTypesA GetVolumePathNameW FindResourceExA SetFileShortNameW GetVolumeInformationA LoadLibraryW SetVolumeMountPointA GetSystemTimeAdjustment GetVersionExW GetConsoleAliasW GetFileAttributesW GetGeoInfoA GetTimeZoneInformation GetBinaryTypeW WritePrivateProfileStringW GetShortPathNameA GetProfileIntA GetLastError GetProcAddress GetLongPathNameA VirtualAlloc IsBadHugeWritePtr WriteConsoleOutputCharacterW SearchPathW OpenWaitableTimerA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW GetFileType AddVectoredExceptionHandler CreateEventW BeginUpdateResourceA AddAtomA FoldStringW EnumResourceTypesW GlobalWire GetModuleFileNameA FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW GetConsoleTitleW VirtualProtect GetFileAttributesExW PeekConsoleInputA GetCPInfoExA ReadConsoleInputW DeleteFileW SetFileAttributesW DeleteFileA GlobalGetAtomNameA FindFirstChangeNotificationW GetComputerNameA FillConsoleOutputCharacterA ResetEvent GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException ReadFile HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

advapi32

DeregisterEventSource CloseEventLog

ole32

OleQueryLinkFromData

Sharing