file[.]exe | Triage™

General

Target
file.exe
Size 397KB
Sample221007-c5akmsbdd2
SHA256 76e36d8a69d09ef26a2689fe0edc4d6bd28d1cdbb27a871b7566357b59a9427f
MD5 dfc51f13a95e4111854a6a3ac12a6f4a
SHA1 2dbaaa69bd00ead9b9fff95c1c169b5bced46216
SHA512 26bbf2b0d7a9941acdd0c5f475bfa6aa15ee2b1e25f8c1a3a479cfc01776ab9b0568ca1d03a7dae4275b71b4f7435bd7524a0f62d8fba8a5aee9d48dc7a8ccd7
SSDEEP 6144:M2+fdtSV88jhgOWSffdyBi1PqLMEqUC9JdUpzuzbgwuOfrYwVfU:MXf3KPjCifV1CLMEuTUJunnRfrQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 397KB

file.exe

IMPHASH bcdcde9a8dd5ae0f93f0322efa1dbf4b
SHA256 76e36d8a69d09ef26a2689fe0edc4d6bd28d1cdbb27a871b7566357b59a9427f
MD5 dfc51f13a95e4111854a6a3ac12a6f4a
SHA1 2dbaaa69bd00ead9b9fff95c1c169b5bced46216
SHA512 26bbf2b0d7a9941acdd0c5f475bfa6aa15ee2b1e25f8c1a3a479cfc01776ab9b0568ca1d03a7dae4275b71b4f7435bd7524a0f62d8fba8a5aee9d48dc7a8ccd7
SSDEEP 6144:M2+fdtSV88jhgOWSffdyBi1PqLMEqUC9JdUpzuzbgwuOfrYwVfU:MXf3KPjCifV1CLMEuTUJunnRfrQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29968

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole FindResourceExW SetConsoleTextAttribute GetConsoleAliasA WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW SetCommTimeouts EnumResourceTypesA GetVolumePathNameW SetFileShortNameW GetVolumeInformationA LoadLibraryW CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetConsoleAliasW GetFileAttributesW GetGeoInfoA GetTimeZoneInformation GetBinaryTypeW WritePrivateProfileStringW GetShortPathNameA GetProfileIntA GetLastError GetProcAddress GetLongPathNameA VirtualAlloc IsBadHugeWritePtr WriteConsoleOutputCharacterW ResetEvent OpenWaitableTimerA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW GetFileType AddVectoredExceptionHandler GlobalGetAtomNameW AddAtomA FoldStringW EnumResourceTypesW GlobalWire GetModuleFileNameA FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW GetConsoleTitleW VirtualProtect GetFileAttributesExW PeekConsoleInputA GetCPInfoExA ReadConsoleInputW DeleteFileW SetFileAttributesW DeleteFileA FindFirstChangeNotificationW GetComputerNameA SearchPathW FillConsoleOutputCharacterA BeginUpdateResourceW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection WriteFile InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

CloseEventLog DeregisterEventSource

Sharing