file[.]exe | Triage™

General

Target
file.exe
Size 268KB
Sample221007-3h9pbseabq
SHA256 06b88ee8697414199f1866530a550da2c8e5f1a2f98cf39d1a9ece38b76a8f03
MD5 ad8d5d0559d1360b61db1c652c1e2a5a
SHA1 3c33eb2f1c35607d5fc1a36899a0720d9fc074a9
SHA512 2a719e332e6ad5df9037ad3e2ec0debb9e7bec66928e00f31add6f7f15613bcb35a2d9ce265cfdd88dbbcb21a70a6c0307f580dc78aa6df980691a1e8dde1fd3
SSDEEP 6144:th4nUnlHExTy1ToMBVt+g5U1y2rc7ITsqeOXO:tWcOEnT54y2w7R0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 268KB

file.exe

IMPHASH 4a811fb18cdae19040192b8d75d83886
SHA256 06b88ee8697414199f1866530a550da2c8e5f1a2f98cf39d1a9ece38b76a8f03
MD5 ad8d5d0559d1360b61db1c652c1e2a5a
SHA1 3c33eb2f1c35607d5fc1a36899a0720d9fc074a9
SHA512 2a719e332e6ad5df9037ad3e2ec0debb9e7bec66928e00f31add6f7f15613bcb35a2d9ce265cfdd88dbbcb21a70a6c0307f580dc78aa6df980691a1e8dde1fd3
SSDEEP 6144:th4nUnlHExTy1ToMBVt+g5U1y2rc7ITsqeOXO:tWcOEnT54y2w7R0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute WaitNamedPipeA HeapFree SetComputerNameW SetVolumeMountPointW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW GetVolumePathNameW SetFileShortNameW LoadLibraryW CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetShortPathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc FindResourceExW SearchPathA LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW GlobalGetAtomNameW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetCPInfoExA SetFileShortNameA ReadConsoleInputW GetFileInformationByHandle DeleteFileA AllocConsole IsBadHugeReadPtr WriteConsoleOutputCharacterW PeekConsoleInputW FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing