file[.]exe | Triage™

General

Target
file.exe
Size 397KB
Sample221007-yan1fadebp
SHA256 80bc5cf59fa0e901e8e6a46bce2cfe54caebd97c2a1acf4b4a5543b642b8f2b9
MD5 657aef95d32dd1db1ad7d88585723887
SHA1 9d445ba88d6600320dd6ca55b503ec4e42e68d2e
SHA512 041770731824574af12d8b568c76ee85d6d1014261552f370e802a6cf97d16656b4c3d1da32c181ad499bf1d49d6d0947bbc1abe6366d23043fa5a9b151a382b
SSDEEP 6144:UkZ9HeAIzj0GOuVBHIqQX9DuYscC54o58RZH8x7ITsqe4:UkD+AIz+unHxiBdvDcx7R4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 397KB

file.exe

IMPHASH 89d34d4205543104033567361c0a6280
SHA256 80bc5cf59fa0e901e8e6a46bce2cfe54caebd97c2a1acf4b4a5543b642b8f2b9
MD5 657aef95d32dd1db1ad7d88585723887
SHA1 9d445ba88d6600320dd6ca55b503ec4e42e68d2e
SHA512 041770731824574af12d8b568c76ee85d6d1014261552f370e802a6cf97d16656b4c3d1da32c181ad499bf1d49d6d0947bbc1abe6366d23043fa5a9b151a382b
SSDEEP 6144:UkZ9HeAIzj0GOuVBHIqQX9DuYscC54o58RZH8x7ITsqe4:UkD+AIz+unHxiBdvDcx7R4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute WaitNamedPipeA SetComputerNameW SetVolumeMountPointW GetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW GetVolumePathNameW SetFileShortNameW LoadLibraryW CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetShortPathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW FindResourceExW ResetEvent LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW GlobalGetAtomNameW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetCPInfoExA SetFileShortNameA ReadConsoleInputW GetFileInformationByHandle DeleteFileA AllocConsole IsBadHugeReadPtr WriteConsoleOutputCharacterW SearchPathA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing