file[.]exe | Triage™

General

Target
file.exe
Size 301KB
Sample221012-w6ltvafdfp
SHA256 e9dd7fef4a2b99ed869d451c898a404733825556bf47cea3aaef61026f30bb69
MD5 52ae2739567954bf4ddf0a298e6b349e
SHA1 f4b0dbdd3c364da521c674fab0b96654aff9bf6e
SHA512 ed8cfb8611d4e25a237fe9ff9fd35f3cf71663db9ca65e1260c847f7b01961aa919f2bb623023a7094b3c8bbc5959b4498e9c7a42b0263215b1ebc1ca4566bb7
SSDEEP 6144:8ScexzmxNjXMo3Z/wX2HUsD4815FSDtUeigavwVf:8PeBsN5/w6U1O5FSyT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 301KB

file.exe

IMPHASH 431995fc4e1c6b7aa6a3a333f4d305c5
SHA256 e9dd7fef4a2b99ed869d451c898a404733825556bf47cea3aaef61026f30bb69
MD5 52ae2739567954bf4ddf0a298e6b349e
SHA1 f4b0dbdd3c364da521c674fab0b96654aff9bf6e
SHA512 ed8cfb8611d4e25a237fe9ff9fd35f3cf71663db9ca65e1260c847f7b01961aa919f2bb623023a7094b3c8bbc5959b4498e9c7a42b0263215b1ebc1ca4566bb7
SSDEEP 6144:8ScexzmxNjXMo3Z/wX2HUsD4815FSDtUeigavwVf:8PeBsN5/w6U1O5FSyT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30064

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW IsBadStringPtrW GetCPInfoExW GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA AddAtomA FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetBinaryTypeW CreateMutexW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing