file[.]exe | Triage™

General

Target
file.exe
Size 276KB
Sample221010-rwbtnscbf4
SHA256 61d29c242e453f9c2744cc0f32578843d0a52d5ef0e4b83d4cd39c3d4abdb68f
MD5 699a1d7bd4b78fc10a1038ae8ae9f807
SHA1 76e4ba6b26cd66682ea01f59bafe382047433e5f
SHA512 64329ce325e678630e57e78e68d9d61e1a7a75c83d48680f8cae4aaa0c6adf2212f5693ee6d6a4eec022a15bce2691e340837a4f4828aff889f3de9765c18948
SSDEEP 3072:sXrylDZbElmWpVR8kAG5bWDx8rJdrbg26B08TNS9v2WKM/h3qpZa9uD6VdyhkhUa:o+9ZQl8FkDrJdXb6BBZWKrwVfquS2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 276KB

file.exe

IMPHASH 7975754c8b06e624fba5c584d5a27b05
SHA256 61d29c242e453f9c2744cc0f32578843d0a52d5ef0e4b83d4cd39c3d4abdb68f
MD5 699a1d7bd4b78fc10a1038ae8ae9f807
SHA1 76e4ba6b26cd66682ea01f59bafe382047433e5f
SHA512 64329ce325e678630e57e78e68d9d61e1a7a75c83d48680f8cae4aaa0c6adf2212f5693ee6d6a4eec022a15bce2691e340837a4f4828aff889f3de9765c18948
SSDEEP 3072:sXrylDZbElmWpVR8kAG5bWDx8rJdrbg26B08TNS9v2WKM/h3qpZa9uD6VdyhkhUa:o+9ZQl8FkDrJdXb6BBZWKrwVfquS2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30544

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetComputerNameW SetThreadExecutionState GetSystemDefaultLCID GetTickCount EnumCalendarInfoExW ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc LoadLibraryW ReadConsoleInputA SetVolumeMountPointA GetFileAttributesA SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW WritePrivateProfileStringW GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc DnsHostnameToComputerNameA GetFileType CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData LCMapStringW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers HeapSize MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA GetProcessHeap GetConsoleOutputCP

advapi32

DeregisterEventSource

Sharing