file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample221012-abftfscacp
SHA256 5836ed313cfd6d3a7cb7c9bf1bd5f8a0d19ff815f66f8a8ab3427319d94db086
MD5 06896273843b2f4ecde48be12c09eb9b
SHA1 12983aaa22f80d3fb3bf362b0d09a184c9ee6c0e
SHA512 2015ad1115d2d06c19c6f369bec682139c0d2f34c462fe877580bf69469970a54458b2c8c4b61b113e1fb52ef452c555e4ed4483416c48bcb5c59c315c5876d9
SSDEEP 6144:eh73vOOir4AsvROs+rksrndSrwVfquSw:KqO/AsvYdSd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH f86972b0b9fc89569bd497bebfd6a497
SHA256 5836ed313cfd6d3a7cb7c9bf1bd5f8a0d19ff815f66f8a8ab3427319d94db086
MD5 06896273843b2f4ecde48be12c09eb9b
SHA1 12983aaa22f80d3fb3bf362b0d09a184c9ee6c0e
SHA512 2015ad1115d2d06c19c6f369bec682139c0d2f34c462fe877580bf69469970a54458b2c8c4b61b113e1fb52ef452c555e4ed4483416c48bcb5c59c315c5876d9
SSDEEP 6144:eh73vOOir4AsvROs+rksrndSrwVfquSw:KqO/AsvYdSd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29936

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing