file[.]exe | Triage™

General

Target
file.exe
Size 208KB
Sample221014-djfp7sdfgn
SHA256 4b8eec2c8380de6d1e69f02a5967eb98e62dab346bafa2cbd881721330ecf0fd
MD5 a8175a6f56749f36c353e0e25e2dc7cd
SHA1 ecb5939db1214b39d3c185bde2275b048c426b1b
SHA512 3018733ca0c0d5a079cbf63a97e18df0e2b4baa04de951e9e796ed733dbd1d5350e083a12c441f2584cafd25fb00532dba2eb60dbfb7f734aca22c399c36286f
SSDEEP 3072:EXNxYVqMXXgWc4inXO5L06NXocKRX/A6rhl9qc3fwTMD:A3eqMXp2XMXMRX/AgPIK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 208KB

file.exe

IMPHASH 753f47ca0e86ad57b0cf1402ebea1e9c
SHA256 4b8eec2c8380de6d1e69f02a5967eb98e62dab346bafa2cbd881721330ecf0fd
MD5 a8175a6f56749f36c353e0e25e2dc7cd
SHA1 ecb5939db1214b39d3c185bde2275b048c426b1b
SHA512 3018733ca0c0d5a079cbf63a97e18df0e2b4baa04de951e9e796ed733dbd1d5350e083a12c441f2584cafd25fb00532dba2eb60dbfb7f734aca22c399c36286f
SSDEEP 3072:EXNxYVqMXXgWc4inXO5L06NXocKRX/A6rhl9qc3fwTMD:A3eqMXp2XMXMRX/AgPIK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29184

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetBinaryTypeW IsBadStringPtrA GetLastError TlsGetValue VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType AddAtomW FoldStringW FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetProcAddress CreateMutexW GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing