file[.]exe | Triage™

General

Target
file.exe
Size 275KB
Sample221010-ymjaqadaa5
SHA256 a538bebabb6ea6b317da86cc33711b7aa77773665b69c079aca1d482017d3ae7
MD5 407a0a972642e3b5e6650f03e14fd50f
SHA1 69bf9a80d59706324549a52618c50719a601983e
SHA512 9da7e80fd7519b15e1a6e2f16938a097ce68d4d7a70eeb9b0e45c7ac0e139054ba387347075ea1075f4c247cd6ca55110be7b607ac27d08b348ecb8d2c9e125c
SSDEEP 6144:w3YbZMmJ7FuM0uERAcpHW3tqAYerwVfquS:wMJ7yRAsHW9qqd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 275KB

file.exe

IMPHASH 07b1ef3258ebab64b9ed2d10baa12dbc
SHA256 a538bebabb6ea6b317da86cc33711b7aa77773665b69c079aca1d482017d3ae7
MD5 407a0a972642e3b5e6650f03e14fd50f
SHA1 69bf9a80d59706324549a52618c50719a601983e
SHA512 9da7e80fd7519b15e1a6e2f16938a097ce68d4d7a70eeb9b0e45c7ac0e139054ba387347075ea1075f4c247cd6ca55110be7b607ac27d08b348ecb8d2c9e125c
SSDEEP 6144:w3YbZMmJ7FuM0uERAcpHW3tqAYerwVfquS:wMJ7yRAsHW9qqd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30176

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetThreadLocale GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers HeapSize MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringW GetProcessHeap GetConsoleOutputCP

advapi32

DeregisterEventSource

Sharing