file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample221010-xd2j9scge7
SHA256 4e22df8d17b464398165345d435aeab78011cfabf309e5d8339472fe8d1a2971
MD5 8a362d36a141c11044d0e02e498f27be
SHA1 dc4aafd76dfdafc5224e9eb986df987cfe828a74
SHA512 ea4ddafe5f93baadd86917bda95a969e72f77cc86f92cd149843319565f8d3961c569e22693075334eb6b4f03f4eb235d5a5dce7966f14b7dc9f600822615b02
SSDEEP 6144:jZens/wTPToCzw867VtPk05vhIJ2kKRM0bLWxb2JgrwVfquS:jaTPJq205vhi27Rqp1d
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH ae11519a6eac288b6a17a0c03e5a652c
SHA256 4e22df8d17b464398165345d435aeab78011cfabf309e5d8339472fe8d1a2971
MD5 8a362d36a141c11044d0e02e498f27be
SHA1 dc4aafd76dfdafc5224e9eb986df987cfe828a74
SHA512 ea4ddafe5f93baadd86917bda95a969e72f77cc86f92cd149843319565f8d3961c569e22693075334eb6b4f03f4eb235d5a5dce7966f14b7dc9f600822615b02
SSDEEP 6144:jZens/wTPToCzw867VtPk05vhIJ2kKRM0bLWxb2JgrwVfquS:jaTPJq205vhi27Rqp1d
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30096

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetTickCount ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW WritePrivateProfileStringW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc DnsHostnameToComputerNameA GetFileType AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers HeapSize MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringW GetProcessHeap GetConsoleOutputCP

advapi32

DeregisterEventSource

Sharing