file[.]exe | Triage™

General

Target
file.exe
Size 396KB
Sample221007-wla7lsdad7
SHA256 b171ed213578fd044444acd7a8679d6867141007cd00d01d6d391685f5e253ae
MD5 756cee17400863b7414059927e0d5102
SHA1 ea76ef4c541f7cc8684d6ec82494574290d81e5f
SHA512 7df9379d5e8d380399be9f29378ee6778777b5093546fd950d5121274f295e18c6af15934d20ec2a8646c37c846c2d878cab3351fa9242884112859fa72be3c1
SSDEEP 12288:og/rmV9udkCar/AsQK6+NUd/nqMazAWeunn70:oRLekCarpQKLNU/nXaUM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 396KB

file.exe

IMPHASH 89d34d4205543104033567361c0a6280
SHA256 b171ed213578fd044444acd7a8679d6867141007cd00d01d6d391685f5e253ae
MD5 756cee17400863b7414059927e0d5102
SHA1 ea76ef4c541f7cc8684d6ec82494574290d81e5f
SHA512 7df9379d5e8d380399be9f29378ee6778777b5093546fd950d5121274f295e18c6af15934d20ec2a8646c37c846c2d878cab3351fa9242884112859fa72be3c1
SSDEEP 12288:og/rmV9udkCar/AsQK6+NUd/nqMazAWeunn70:oRLekCarpQKLNU/nXaUM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute WaitNamedPipeA SetComputerNameW SetVolumeMountPointW GetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW GetVolumePathNameW SetFileShortNameW LoadLibraryW CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetShortPathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW FindResourceExW ResetEvent LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW GlobalGetAtomNameW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetCPInfoExA SetFileShortNameA ReadConsoleInputW GetFileInformationByHandle DeleteFileA AllocConsole IsBadHugeReadPtr WriteConsoleOutputCharacterW SearchPathA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing