file[.]exe | Triage™

General

Target
file.exe
Size 268KB
Sample221007-zepm7sdeb9
SHA256 76990e4d969dcc022993be6bf4a3e0b026ddafc95d83ffd8b9def8615dd99c19
MD5 fab4d407720356e387ab603b39c61b43
SHA1 41b4522ef8ba40ab12a2160210b86e70fc2d8d0d
SHA512 1b0f8e853e788414bf477abed891e2d80a6aeee656692e5394603d2a19c79210621c1b0ec3fac0b31cbc67aaae60b9cfb663cd3ebace32f631b31a8452c919f9
SSDEEP 3072:3XNHfhGqsE7PLlYhMm5yyujwxw1jhtJXqJmBd27hoo0u3p7kVggjcGkNIVqIxM/G:nFZBLlYezGwvaJmBdShf7A7ITsqe4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 268KB

file.exe

IMPHASH 89d34d4205543104033567361c0a6280
SHA256 76990e4d969dcc022993be6bf4a3e0b026ddafc95d83ffd8b9def8615dd99c19
MD5 fab4d407720356e387ab603b39c61b43
SHA1 41b4522ef8ba40ab12a2160210b86e70fc2d8d0d
SHA512 1b0f8e853e788414bf477abed891e2d80a6aeee656692e5394603d2a19c79210621c1b0ec3fac0b31cbc67aaae60b9cfb663cd3ebace32f631b31a8452c919f9
SSDEEP 3072:3XNHfhGqsE7PLlYhMm5yyujwxw1jhtJXqJmBd27hoo0u3p7kVggjcGkNIVqIxM/G:nFZBLlYezGwvaJmBdShf7A7ITsqe4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute WaitNamedPipeA SetComputerNameW SetVolumeMountPointW GetComputerNameW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW GetVolumePathNameW SetFileShortNameW LoadLibraryW CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetShortPathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW FindResourceExW ResetEvent LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW GlobalGetAtomNameW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetCPInfoExA SetFileShortNameA ReadConsoleInputW GetFileInformationByHandle DeleteFileA AllocConsole IsBadHugeReadPtr WriteConsoleOutputCharacterW SearchPathA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing