file[.]exe | Triage™

General

Target
file.exe
Size 398KB
Sample221008-tkmsxafbaj
SHA256 8b89fe8301da063958fe0df539e47781319a4f0c9a4b8bd0f49bf5c845308319
MD5 5cffb6f6ef9e077a11191ef7751a85a0
SHA1 dde5c6c23cc607637e9b01d4f78862c64b83fc12
SHA512 983fe3b8d6cacd52d8be3ffd61d3360a3b38c88046f5b80772d181f2dbb5d7a321e5aa6c4420d0709659105285102047592b6a879154034a6449e5c38681feeb
SSDEEP 6144:d27B+AVkMmGcMppJgmaM/YOYDQzhvMhrpW+G1JKxS/RxJJ4srwVfeXOW:dskMmGcMppJgmaMAOKQzB+GJRxJJ4sL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 398KB

file.exe

IMPHASH 9b42896b222b9e79ad310b3f1bed70e0
SHA256 8b89fe8301da063958fe0df539e47781319a4f0c9a4b8bd0f49bf5c845308319
MD5 5cffb6f6ef9e077a11191ef7751a85a0
SHA1 dde5c6c23cc607637e9b01d4f78862c64b83fc12
SHA512 983fe3b8d6cacd52d8be3ffd61d3360a3b38c88046f5b80772d181f2dbb5d7a321e5aa6c4420d0709659105285102047592b6a879154034a6449e5c38681feeb
SSDEEP 6144:d27B+AVkMmGcMppJgmaM/YOYDQzhvMhrpW+G1JKxS/RxJJ4srwVfeXOW:dskMmGcMppJgmaMAOKQzB+GJRxJJ4sL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree SetVolumeMountPointW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW EnumResourceTypesA GetVolumePathNameW SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW CreateTimerQueueTimer WaitNamedPipeA GlobalGetAtomNameA SearchPathA LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW FoldStringW GlobalWire FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetShortPathNameW GetCPInfoExA SetFileShortNameA EnumResourceLanguagesW GetFileInformationByHandle SetFileAttributesW DeleteFileA FindResourceExW SetConsoleTextAttribute IsBadHugeReadPtr SetComputerNameA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetHandleCount GetStdHandle GetFileType DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount ReadFile HeapSize SetStdHandle GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing