file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample221010-1qgbmsdch8
SHA256 6043901d9274ebce668115dce7fb8bdff1571599f278b1eba6c6f2aca417ef7e
MD5 5f336d69ffc793b22d91b28e9878925e
SHA1 d1dfe8247b8e5873d3709cf7e4d7982c0955393f
SHA512 9efce6f3806f0221e25b53e689a9a0ffcf9cf90409589d52e132963bd837e2def4a648242749b937ce21daf7952311573adb4101ac1430fb6b74e54fd3192540
SSDEEP 3072:NXdvIU6XROMgDGq8K7D5fENVQ9Wde8EkEgWuQ1gahElxCE7GbM/h3qpZa9uD6VdU:JRIU6BO4YxP0deIJtp+EKeGbrwVfquS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH 335f6a3bc923ae5bc86b0cc6c8226b4c
SHA256 6043901d9274ebce668115dce7fb8bdff1571599f278b1eba6c6f2aca417ef7e
MD5 5f336d69ffc793b22d91b28e9878925e
SHA1 d1dfe8247b8e5873d3709cf7e4d7982c0955393f
SHA512 9efce6f3806f0221e25b53e689a9a0ffcf9cf90409589d52e132963bd837e2def4a648242749b937ce21daf7952311573adb4101ac1430fb6b74e54fd3192540
SSDEEP 3072:NXdvIU6XROMgDGq8K7D5fENVQ9Wde8EkEgWuQ1gahElxCE7GbM/h3qpZa9uD6VdU:JRIU6BO4YxP0deIJtp+EKeGbrwVfquS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30176

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers HeapSize MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringW GetProcessHeap GetConsoleOutputCP

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing