file[.]exe | Triage™

General

Target
file.exe
Size 396KB
Sample221007-xe7snsddbm
SHA256 f3580ea4cd6f27353a84ae15f6086b7c5098343e43afdd8dc3e16e9d56fd701b
MD5 61a7cc6fe63e8682a691adfd1fbfdce1
SHA1 19000d00d1a1dfc6fa142a0508c5f54d1c8e0932
SHA512 b78af156ac6283d1da32df063105bbf19b3a8be55423ec33f6cd259d68e5002f579b3cfbc5c6c8915ffe46ddb9b854bc1b19006700beae8d719758b0d0a352de
SSDEEP 6144:DTZWnRfq+rI1aVIQXJLrbZ5Iws/PvhWd5bXe36HupZhD7Uuzbgwu38wVfs:DTgRfTI1GXJLrDIZ/PwdNNO9D7Uunn/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 396KB

file.exe

IMPHASH 89d34d4205543104033567361c0a6280
SHA256 f3580ea4cd6f27353a84ae15f6086b7c5098343e43afdd8dc3e16e9d56fd701b
MD5 61a7cc6fe63e8682a691adfd1fbfdce1
SHA1 19000d00d1a1dfc6fa142a0508c5f54d1c8e0932
SHA512 b78af156ac6283d1da32df063105bbf19b3a8be55423ec33f6cd259d68e5002f579b3cfbc5c6c8915ffe46ddb9b854bc1b19006700beae8d719758b0d0a352de
SSDEEP 6144:DTZWnRfq+rI1aVIQXJLrbZ5Iws/PvhWd5bXe36HupZhD7Uuzbgwu38wVfs:DTgRfTI1GXJLrDIZ/PwdNNO9D7Uunn/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute WaitNamedPipeA SetComputerNameW SetVolumeMountPointW GetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW GetVolumePathNameW SetFileShortNameW LoadLibraryW CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetShortPathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW FindResourceExW ResetEvent LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW GlobalGetAtomNameW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetCPInfoExA SetFileShortNameA ReadConsoleInputW GetFileInformationByHandle DeleteFileA AllocConsole IsBadHugeReadPtr WriteConsoleOutputCharacterW SearchPathA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing