file[.]exe | Triage™

General

Target
file.exe
Size 208KB
Sample221013-3g5c8aagd4
SHA256 2b687a961581930e8f0e540a5b5befc647e6b459df98faf7f7a1007fe3770e1a
MD5 311caaa3c894c38a4541203fdb0ae617
SHA1 22d71ff9403111bc1164d87ea5c3c619042cf116
SHA512 032fba7b63707127c1836691b22cc64c418890d8ff5737150573dfc0af64b320605e32e2d536b5d8ba5f6ea15a99b348e7c1ebc09636ab74df3d46bdf2563eee
SSDEEP 3072:HXNxkj7/bXP1Kc/d04O5LX69TiSlpvAoSQwt5Y5D:33o7/bly4Mq9TRpvAjQS5YB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 208KB

file.exe

IMPHASH 753f47ca0e86ad57b0cf1402ebea1e9c
SHA256 2b687a961581930e8f0e540a5b5befc647e6b459df98faf7f7a1007fe3770e1a
MD5 311caaa3c894c38a4541203fdb0ae617
SHA1 22d71ff9403111bc1164d87ea5c3c619042cf116
SHA512 032fba7b63707127c1836691b22cc64c418890d8ff5737150573dfc0af64b320605e32e2d536b5d8ba5f6ea15a99b348e7c1ebc09636ab74df3d46bdf2563eee
SSDEEP 3072:HXNxkj7/bXP1Kc/d04O5LX69TiSlpvAoSQwt5Y5D:33o7/bly4Mq9TRpvAjQS5YB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29184

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetBinaryTypeW IsBadStringPtrA GetLastError TlsGetValue VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType AddAtomW FoldStringW FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetProcAddress CreateMutexW GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing