file[.]exe | Triage™

General

Target
file.exe
Size 294KB
Sample221012-rwva1sffal
SHA256 79ca6bbd7ad67fbbb9a2a508ae1bca247c2ebdf9a4e929db068c8621df20d743
MD5 17b996c4ec8059783a77cfd0fb70bbd0
SHA1 6e044e93c92d1ec9e7a53a63ac96c44943122967
SHA512 eef5463f9a69f63adb1e9197c49aa3e769585b1a63afc9cae50678648a569be6712d8ea69a8fd1f178a6bc54c8f137e26b05426d95e6a5310c532f3958e74830
SSDEEP 6144:t55FxZSy8hXsG05X6C8Sucj+RttvseigavwVf3:tZxUrXsf8xc6nVsT8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 294KB

file.exe

IMPHASH e7335d11c67dfcbac096cafa51d4b057
SHA256 79ca6bbd7ad67fbbb9a2a508ae1bca247c2ebdf9a4e929db068c8621df20d743
MD5 17b996c4ec8059783a77cfd0fb70bbd0
SHA1 6e044e93c92d1ec9e7a53a63ac96c44943122967
SHA512 eef5463f9a69f63adb1e9197c49aa3e769585b1a63afc9cae50678648a569be6712d8ea69a8fd1f178a6bc54c8f137e26b05426d95e6a5310c532f3958e74830
SSDEEP 6144:t55FxZSy8hXsG05X6C8Sucj+RttvseigavwVf3:tZxUrXsf8xc6nVsT8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30384

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing