file[.]exe | Triage™

General

Target
file.exe
Size 406KB
Sample221010-k96smsbecm
SHA256 4e847643568276229dbc26f82152bbbbd2c5bf86b6bbd43080e297285c545b8c
MD5 1eb79d53638010bc026896a652f84805
SHA1 011cb8739d809bd2a40def02532c6ad6537ab1d4
SHA512 df50bdf9de395aa689454d868f9331e571528d70c2c887c90aa240dc6b592182048ed86e96be03701d14568ad430bb48c79552b988d011bdf6c6a31cfe722190
SSDEEP 6144:EgwHVX2xh/b5A39QEc5Vs0wDq4beYbvZsnMB1rW9313krwVfquS:Eg4X2r/a3oiVu4bD2nM3W9lUd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 406KB

file.exe

IMPHASH 86121436ff5ad4d639bb9d7e4c098681
SHA256 4e847643568276229dbc26f82152bbbbd2c5bf86b6bbd43080e297285c545b8c
MD5 1eb79d53638010bc026896a652f84805
SHA1 011cb8739d809bd2a40def02532c6ad6537ab1d4
SHA512 df50bdf9de395aa689454d868f9331e571528d70c2c887c90aa240dc6b592182048ed86e96be03701d14568ad430bb48c79552b988d011bdf6c6a31cfe722190
SSDEEP 6144:EgwHVX2xh/b5A39QEc5Vs0wDq4beYbvZsnMB1rW9313krwVfquS:Eg4X2r/a3oiVu4bD2nM3W9lUd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30432

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile GetConsoleAliasExesLengthA GetConsoleAliasA HeapFree SetComputerNameW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA GetTickCount EnumCalendarInfoExW ConvertFiberToThread WaitNamedPipeW EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW ReadConsoleInputA SetVolumeMountPointA GetFileAttributesA SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW GetVolumePathNameA WritePrivateProfileStringW GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc DnsHostnameToComputerNameA GetFileType CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersionExA SetFileValidData FindActCtxSectionStringW LCMapStringW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

Sharing