file[.]exe | Triage™

General

Target
file.exe
Size 267KB
Sample221007-22tlsadhhm
SHA256 e41c1214b5c99409d6ca5b187c39d2db5c0907366ba2be348c65e6567d0c950c
MD5 03fca6487f00ec343cb20f50e43ade13
SHA1 cf0c85afbb7c5f3e97ce5bc857f0a38a886cba69
SHA512 aef4cd2aaf466acdfa7e67eaeb7e3d454512cfddfe21a135c1988241a14364ce92fcaffe12d7dcfa19c7a874883abc73d14e38ec224886aa8595286a6cfd7af6
SSDEEP 3072:aXNFfhFseEIKoJNMm5vfF4Y9vLCJk4DRky9xqVggjcGkNIVqIxM/h3bRv47R:6XZQoJF4YdCR87ITsqe4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 267KB

file.exe

IMPHASH 89d34d4205543104033567361c0a6280
SHA256 e41c1214b5c99409d6ca5b187c39d2db5c0907366ba2be348c65e6567d0c950c
MD5 03fca6487f00ec343cb20f50e43ade13
SHA1 cf0c85afbb7c5f3e97ce5bc857f0a38a886cba69
SHA512 aef4cd2aaf466acdfa7e67eaeb7e3d454512cfddfe21a135c1988241a14364ce92fcaffe12d7dcfa19c7a874883abc73d14e38ec224886aa8595286a6cfd7af6
SSDEEP 3072:aXNFfhFseEIKoJNMm5vfF4Y9vLCJk4DRky9xqVggjcGkNIVqIxM/h3bRv47R:6XZQoJF4YdCR87ITsqe4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute WaitNamedPipeA SetComputerNameW SetVolumeMountPointW GetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW GetVolumePathNameW SetFileShortNameW LoadLibraryW CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetShortPathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW FindResourceExW ResetEvent LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW GlobalGetAtomNameW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetCPInfoExA SetFileShortNameA ReadConsoleInputW GetFileInformationByHandle DeleteFileA AllocConsole IsBadHugeReadPtr WriteConsoleOutputCharacterW SearchPathA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing