file[.]exe | Triage™

General

Target
file.exe
Size 294KB
Sample221012-ta25vaabd2
SHA256 8b9a243e7ce5cc08d38a9d780ce63fdcf7d42b20a39f41b7c54db58db9984840
MD5 c2964758b5d5e8670b38b40920d4ee02
SHA1 9f50d4f98fa7c7b618cf206754ff725e11bbe83f
SHA512 4cbbce84d74f348ed80765e08a65636b31bdf1047a4983d97274084dc0fcc16f21821d198d8c5bd8853408ef6e18b8823c4564b5cf6d91d53ab133030592ef8b
SSDEEP 6144:GSAd/iH3X0yvMOUv4iw6Bpi9Bt9eigavwVf:GD/sX0uMOElw6BpirPT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 294KB

file.exe

IMPHASH 431995fc4e1c6b7aa6a3a333f4d305c5
SHA256 8b9a243e7ce5cc08d38a9d780ce63fdcf7d42b20a39f41b7c54db58db9984840
MD5 c2964758b5d5e8670b38b40920d4ee02
SHA1 9f50d4f98fa7c7b618cf206754ff725e11bbe83f
SHA512 4cbbce84d74f348ed80765e08a65636b31bdf1047a4983d97274084dc0fcc16f21821d198d8c5bd8853408ef6e18b8823c4564b5cf6d91d53ab133030592ef8b
SSDEEP 6144:GSAd/iH3X0yvMOUv4iw6Bpi9Bt9eigavwVf:GD/sX0uMOElw6BpirPT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW IsBadStringPtrW GetCPInfoExW GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA AddAtomA FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetBinaryTypeW CreateMutexW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing