file[.]exe | Triage™

General

Target
file.exe
Size 265KB
Sample221007-fmdq5abhap
SHA256 c9bd207d0234dd0fd531e640e2386fc86c35d71f900d045fca53d5d0a1102a54
MD5 ebfea4fcfbde3e89449e2aa9b9312391
SHA1 6c58d23d476c820a83c52db5ccb581738e185ae3
SHA512 a26a30b9ba4fd40f3f01e68acd4c39e4835eb30f644b55f4c04f1f83a1362aa53f537b9749995b07334b6c2202901b9b79170f362b61fc0e1c679c6fdfe9a87d
SSDEEP 6144:iE/RO6Eto5bv1/O5gUYkuzbgwuzvCwVfU:iMUQ+5g0unnl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 265KB

file.exe

IMPHASH 253e5cba178f9b60249e48cf66c139a4
SHA256 c9bd207d0234dd0fd531e640e2386fc86c35d71f900d045fca53d5d0a1102a54
MD5 ebfea4fcfbde3e89449e2aa9b9312391
SHA1 6c58d23d476c820a83c52db5ccb581738e185ae3
SHA512 a26a30b9ba4fd40f3f01e68acd4c39e4835eb30f644b55f4c04f1f83a1362aa53f537b9749995b07334b6c2202901b9b79170f362b61fc0e1c679c6fdfe9a87d
SSDEEP 6144:iE/RO6Eto5bv1/O5gUYkuzbgwuzvCwVfU:iMUQ+5g0unnl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29808

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole FindResourceExW SetConsoleTextAttribute GetConsoleAliasA WaitNamedPipeA SetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW SetCommTimeouts EnumResourceTypesA GetVolumePathNameW SetFileShortNameW LoadLibraryW CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetConsoleAliasW GetFileAttributesW GetGeoInfoA GetTimeZoneInformation GetBinaryTypeW WritePrivateProfileStringW GetShortPathNameA GetLastError GetProcAddress GetLongPathNameA VirtualAlloc WriteConsoleOutputCharacterW SearchPathW ResetEvent OpenWaitableTimerA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW GetFileType AddVectoredExceptionHandler GlobalGetAtomNameW AddAtomA FoldStringW EnumResourceTypesW GlobalWire GetModuleFileNameA FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW GetConsoleTitleW VirtualProtect GetFileAttributesExW PeekConsoleInputA GetCPInfoExA ReadConsoleInputW DeleteFileW IsBadHugeWritePtr FindFirstChangeNotificationW FillConsoleOutputCharacterA GetComputerNameA BeginUpdateResourceW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection WriteFile InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

CloseEventLog DeregisterEventSource

Sharing