file[.]exe | Triage™

General

Target
file.exe
Size 270KB
Sample221008-v397lafcaj
SHA256 2bd2cdd9908776fc0488ea4a914f7b2feb76581a9a61604f73353a922621a009
MD5 99317001ebeb71fe1e5d8ef4f23ccab2
SHA1 782c40832eb552c73f9064f19152951b687afd91
SHA512 71358fb41e24197b85dc086b2930e1cd049e4f0786ebefa7cab64cdfea002826a633769d0b84599f4c46bd30f469a699dba787d0e35cdd58079c696454db92e3
SSDEEP 6144:TkEB+GM0Eh2Pc9n9ooEqVFqOLqmxrwVfXS:TZEh2PebLDx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 270KB

file.exe

IMPHASH 9b42896b222b9e79ad310b3f1bed70e0
SHA256 2bd2cdd9908776fc0488ea4a914f7b2feb76581a9a61604f73353a922621a009
MD5 99317001ebeb71fe1e5d8ef4f23ccab2
SHA1 782c40832eb552c73f9064f19152951b687afd91
SHA512 71358fb41e24197b85dc086b2930e1cd049e4f0786ebefa7cab64cdfea002826a633769d0b84599f4c46bd30f469a699dba787d0e35cdd58079c696454db92e3
SSDEEP 6144:TkEB+GM0Eh2Pc9n9ooEqVFqOLqmxrwVfXS:TZEh2PebLDx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree SetVolumeMountPointW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW EnumResourceTypesA GetVolumePathNameW SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW CreateTimerQueueTimer WaitNamedPipeA GlobalGetAtomNameA SearchPathA LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW FoldStringW GlobalWire FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetShortPathNameW GetCPInfoExA SetFileShortNameA EnumResourceLanguagesW GetFileInformationByHandle SetFileAttributesW DeleteFileA FindResourceExW SetConsoleTextAttribute IsBadHugeReadPtr SetComputerNameA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetHandleCount GetStdHandle GetFileType DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount ReadFile HeapSize SetStdHandle GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Resubmissions

Sharing