file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample221012-at2hwacac5
SHA256 a49b3d8eb889f1a7798db51729ed281182f2cac73a890fd839675ab8baaebe9a
MD5 e793ebb25703d6f1aac172543b5d81cc
SHA1 356e16818b87bf71d81ecc6c3b635cdcf6a39785
SHA512 a5ee006297a67b1b47611ba10715a9cae882f277146033c70968ced3820e26fa8a658a4af120536c8dbe6c4363652472b53fb6d80d5e59c21a4596f28f264754
SSDEEP 3072:YmX8gquPqaX3Bis5OyVRdSxuE7EcwDEKHWFPpGtiqsM/h3qpZa9uD6VdyhkhUuSw:YO7nXnBirysuEAcwgTAmrwVfquSw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH f86972b0b9fc89569bd497bebfd6a497
SHA256 a49b3d8eb889f1a7798db51729ed281182f2cac73a890fd839675ab8baaebe9a
MD5 e793ebb25703d6f1aac172543b5d81cc
SHA1 356e16818b87bf71d81ecc6c3b635cdcf6a39785
SHA512 a5ee006297a67b1b47611ba10715a9cae882f277146033c70968ced3820e26fa8a658a4af120536c8dbe6c4363652472b53fb6d80d5e59c21a4596f28f264754
SSDEEP 3072:YmX8gquPqaX3Bis5OyVRdSxuE7EcwDEKHWFPpGtiqsM/h3qpZa9uD6VdyhkhUuSw:YO7nXnBirysuEAcwgTAmrwVfquSw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29936

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing