file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample221010-ymjaqadaa6
SHA256 438bbd2ea5dc9139b5fe4120b998496cd827555adeec34a6eabd040491074ad0
MD5 51d7e96174422b92fba838d953d08a24
SHA1 cf67b44fd209fc15b1606721d9e4ca6498bc4b2a
SHA512 bed77cc008b530cd302cb5abbf1e9f85580aa1f4b58462476e25e1189f39fa06ee0115991d75e1d1d51ebdf1782fdc8f24ed5539239c6e3a30fef4a5facd7c3d
SSDEEP 6144:yz2o8NRSj7qCQMsFYM5I7Fs0kPdtrwVfquS:yWSj7kTCtsd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH d432ab96c0953f4be1f6b5eda702e7f0
SHA256 438bbd2ea5dc9139b5fe4120b998496cd827555adeec34a6eabd040491074ad0
MD5 51d7e96174422b92fba838d953d08a24
SHA1 cf67b44fd209fc15b1606721d9e4ca6498bc4b2a
SHA512 bed77cc008b530cd302cb5abbf1e9f85580aa1f4b58462476e25e1189f39fa06ee0115991d75e1d1d51ebdf1782fdc8f24ed5539239c6e3a30fef4a5facd7c3d
SSDEEP 6144:yz2o8NRSj7qCQMsFYM5I7Fs0kPdtrwVfquS:yWSj7kTCtsd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30144

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers HeapSize MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringW GetProcessHeap GetConsoleOutputCP

advapi32

DeregisterEventSource

Sharing