file[.]exe | Triage™

General

Target
file.exe
Size 302KB
Sample221012-wrfdhsefhm
SHA256 bca785fe68513f5e20cd91edaa92d3f0a292aab00561686d3e48fae36a263bad
MD5 b18ed6034cf2265a65aeb3e6a38e450a
SHA1 f956e081f3b6e9acac2019c1d4ee103b0def8f69
SHA512 2112e26916a4728943955d25ecbd318d61dd5dd5a5a75743e9b4fabfad0de7f1bbabb8a4e47c13d3e57d4a3ffe9fba6fca981a3beb9807485ebcd1c9afaf96a5
SSDEEP 6144:KSX3EYwT/VakqmyFrGFJ8BxREpEnjeigavwVf:K2ALqmCUDMT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 302KB

file.exe

IMPHASH 431995fc4e1c6b7aa6a3a333f4d305c5
SHA256 bca785fe68513f5e20cd91edaa92d3f0a292aab00561686d3e48fae36a263bad
MD5 b18ed6034cf2265a65aeb3e6a38e450a
SHA1 f956e081f3b6e9acac2019c1d4ee103b0def8f69
SHA512 2112e26916a4728943955d25ecbd318d61dd5dd5a5a75743e9b4fabfad0de7f1bbabb8a4e47c13d3e57d4a3ffe9fba6fca981a3beb9807485ebcd1c9afaf96a5
SSDEEP 6144:KSX3EYwT/VakqmyFrGFJ8BxREpEnjeigavwVf:K2ALqmCUDMT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW IsBadStringPtrW GetCPInfoExW GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA AddAtomA FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetBinaryTypeW CreateMutexW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing