file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample221012-mpymmsdce5
SHA256 b1a24217965ae0d12e6c503ef2b8169ed9abb4c71a4580f5a385b3f41cec8163
MD5 59d5b5d0fdd3921eded13030c5e17849
SHA1 a9000a01bcd67d1cf262037db1ed9ad3f2d45a9a
SHA512 2024027a7182d3c8c8ad6aba8f1df8499c46bfe94de088f0814f8b0d3f6494f6245a1ca2eb5fa89259de1f2452884dc790bd5fa5e1f59a4f8f97a98ff8ce96a4
SSDEEP 6144:T7RFHHBs+VlTPlKnHExxKmo3SoeigavwVfquS0n:TvK+VdPgSxzWTZa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH f86972b0b9fc89569bd497bebfd6a497
SHA256 b1a24217965ae0d12e6c503ef2b8169ed9abb4c71a4580f5a385b3f41cec8163
MD5 59d5b5d0fdd3921eded13030c5e17849
SHA1 a9000a01bcd67d1cf262037db1ed9ad3f2d45a9a
SHA512 2024027a7182d3c8c8ad6aba8f1df8499c46bfe94de088f0814f8b0d3f6494f6245a1ca2eb5fa89259de1f2452884dc790bd5fa5e1f59a4f8f97a98ff8ce96a4
SSDEEP 6144:T7RFHHBs+VlTPlKnHExxKmo3SoeigavwVfquS0n:TvK+VdPgSxzWTZa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30336

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing