file[.]exe | Triage™

General

Target
file.exe
Size 302KB
Sample221012-vt9jpsdbe6
SHA256 ea5a00b8a983adb9e938e18782a020a849c6c2d8ec6c33965fef493f2922f4b6
MD5 5c58750a964c33c83f0a362dd2fc978c
SHA1 a5a1ef6a826978210d05540e13a21e5e25f335ed
SHA512 c391bfe6967ca3a8b4a325a044cc0a45911c39a1efe02fedfcf72846ec485129d8a3d83044a3021ab218807d4f23d6945c974776229d6bdd69958a34af9ce8ea
SSDEEP 6144:nSHUWH4CFpyUM4oWiNh0QuEkye3weigavwVf:nXWhFpdM4vQh0EeAT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 302KB

file.exe

IMPHASH 431995fc4e1c6b7aa6a3a333f4d305c5
SHA256 ea5a00b8a983adb9e938e18782a020a849c6c2d8ec6c33965fef493f2922f4b6
MD5 5c58750a964c33c83f0a362dd2fc978c
SHA1 a5a1ef6a826978210d05540e13a21e5e25f335ed
SHA512 c391bfe6967ca3a8b4a325a044cc0a45911c39a1efe02fedfcf72846ec485129d8a3d83044a3021ab218807d4f23d6945c974776229d6bdd69958a34af9ce8ea
SSDEEP 6144:nSHUWH4CFpyUM4oWiNh0QuEkye3weigavwVf:nXWhFpdM4vQh0EeAT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW IsBadStringPtrW GetCPInfoExW GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA AddAtomA FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetBinaryTypeW CreateMutexW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing