file[.]exe | Triage™

General

Target
file.exe
Size 207KB
Sample221014-adezyabhbm
SHA256 0cffc96b96cfbfcc558f374af166ea5ea9f67277e36b5fc821aa8f40fe6cbb43
MD5 cc22aed98c53370199d786c1735000e8
SHA1 969759a1fdd4550f0c499aa1d4860264b0a60856
SHA512 a5812a0be101df6b330ddb8dcd8dc06efdafc43161229516732b0d315fda27a726902039c6ab9569191052b2a94b2c191d85e98a052e5d5b9e1d59dec2497eb5
SSDEEP 3072:aXNxpv5DFCX/LcGIoxO5LJLKtyUtUVoUuuxk6ufzdowD:63pxDFC7/xMJLK8l6dukf+S
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 207KB

file.exe

IMPHASH 753f47ca0e86ad57b0cf1402ebea1e9c
SHA256 0cffc96b96cfbfcc558f374af166ea5ea9f67277e36b5fc821aa8f40fe6cbb43
MD5 cc22aed98c53370199d786c1735000e8
SHA1 969759a1fdd4550f0c499aa1d4860264b0a60856
SHA512 a5812a0be101df6b330ddb8dcd8dc06efdafc43161229516732b0d315fda27a726902039c6ab9569191052b2a94b2c191d85e98a052e5d5b9e1d59dec2497eb5
SSDEEP 3072:aXNxpv5DFCX/LcGIoxO5LJLKtyUtUVoUuuxk6ufzdowD:63pxDFC7/xMJLK8l6dukf+S
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29184

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetBinaryTypeW IsBadStringPtrA GetLastError TlsGetValue VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType AddAtomW FoldStringW FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetProcAddress CreateMutexW GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing