file[.]exe | Triage™

General

Target
file.exe
Size 300KB
Sample221012-xd2v2afhe6
SHA256 b0c4518bd7c4ae491d079e053d6f1adea11c6128e2cf7d7dd6e22171a3a7aab7
MD5 a4bb7bb09c897b6daf691b21dfb32318
SHA1 77afcd89451021a03eefa0e91f8bac9ea220c01b
SHA512 533c1a110303016b20e1231fc278b7a255869e39aa7a389912d18f76761ed3478d7f3e420325b06f4a927782a2a735faad3248254d20798be2d54e37233570db
SSDEEP 6144:xSYfUPSgXjXOJJmp7OICLjKPx1Or2eigavwVf:xxqNXEJYu2T
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 300KB

file.exe

IMPHASH 431995fc4e1c6b7aa6a3a333f4d305c5
SHA256 b0c4518bd7c4ae491d079e053d6f1adea11c6128e2cf7d7dd6e22171a3a7aab7
MD5 a4bb7bb09c897b6daf691b21dfb32318
SHA1 77afcd89451021a03eefa0e91f8bac9ea220c01b
SHA512 533c1a110303016b20e1231fc278b7a255869e39aa7a389912d18f76761ed3478d7f3e420325b06f4a927782a2a735faad3248254d20798be2d54e37233570db
SSDEEP 6144:xSYfUPSgXjXOJJmp7OICLjKPx1Or2eigavwVf:xxqNXEJYu2T
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30064

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW IsBadStringPtrW GetCPInfoExW GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA AddAtomA FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetBinaryTypeW CreateMutexW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing