file[.]exe | Triage™

General

Target
file.exe
Size 294KB
Sample221012-q6dwcaebhj
SHA256 940d65efe796d6e9c35a580b2ccde761a67b500a2f00a137240e2a22025fc0f0
MD5 d721a86892c659b74a3af14588ffea3e
SHA1 5229623dce388950d2f3bf542dd2bad2583d2794
SHA512 c28bd0def71aec717a2d8444acee7bec943205ba828c780f3a5630a8a5357af1678b0a58b0dcd33663496dec4459db2ef4c85914cf078f335072adc52674bdc5
SSDEEP 6144:Q5kbq5oXvVmGOokW1M0+nnN8iDZK0DyeigavwVf2:QsqO/VmDokW4nN8iD9yTZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 294KB

file.exe

IMPHASH e7335d11c67dfcbac096cafa51d4b057
SHA256 940d65efe796d6e9c35a580b2ccde761a67b500a2f00a137240e2a22025fc0f0
MD5 d721a86892c659b74a3af14588ffea3e
SHA1 5229623dce388950d2f3bf542dd2bad2583d2794
SHA512 c28bd0def71aec717a2d8444acee7bec943205ba828c780f3a5630a8a5357af1678b0a58b0dcd33663496dec4459db2ef4c85914cf078f335072adc52674bdc5
SSDEEP 6144:Q5kbq5oXvVmGOokW1M0+nnN8iDZK0DyeigavwVf2:QsqO/VmDokW4nN8iD9yTZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30384

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing