file[.]exe | Triage™

General

Target
file.exe
Size 294KB
Sample221012-pql2cadebl
SHA256 c21d73834b3690403f7dc0ae7a0bb030f947212052596d4b9d878a97ecd60ea1
MD5 d5405f4783f56c2737f1612903f7e024
SHA1 d74be6d952feba7bac6306432f7e9dbd7f8cdd67
SHA512 5e17134aa3c2b1133e4237eed8d193e610b67167d2f16b501f9a2c20055ed445c5cc09d983fcfa656cc3e7ced32ec3709be70e47f7a19bb4fe57e3bf2c0d8d96
SSDEEP 3072:9XCg5o/U+zGKB71aKXnU5Oxz8VANO8qyd013TIj0BHMOqD2M/h3isxkgaBChUpZx:5556BBjhXnj3qyCxIIRMOjeigavwVf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 294KB

file.exe

IMPHASH e7335d11c67dfcbac096cafa51d4b057
SHA256 c21d73834b3690403f7dc0ae7a0bb030f947212052596d4b9d878a97ecd60ea1
MD5 d5405f4783f56c2737f1612903f7e024
SHA1 d74be6d952feba7bac6306432f7e9dbd7f8cdd67
SHA512 5e17134aa3c2b1133e4237eed8d193e610b67167d2f16b501f9a2c20055ed445c5cc09d983fcfa656cc3e7ced32ec3709be70e47f7a19bb4fe57e3bf2c0d8d96
SSDEEP 3072:9XCg5o/U+zGKB71aKXnU5Oxz8VANO8qyd013TIj0BHMOqD2M/h3isxkgaBChUpZx:5556BBjhXnj3qyCxIIRMOjeigavwVf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30368

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing