file[.]exe | Triage™

General

Target
file.exe
Size 207KB
Sample221014-htr87scffq
SHA256 fe419ee8af5fe3dbb505675ee6078748525170ab8fbbb8a53fb8095773b4b161
MD5 e76e0ae2b1b1458e9a69e0c4a735a454
SHA1 f0f586456e195ef8e81a5e9c9ebcbb09a3430475
SHA512 47b6e8c4a67d6cb291adb40a5e60b17aab1065fe9f7d77d8531c43ccdf9f03608bd947e2d25b62165ffee303fc0931d9ed6523087ecb73ea26d8512e855790be
SSDEEP 3072:FXNxpYINwCccGoEqI5TqYkwmHismZz5Oq9+tauaXhOj+:B3+IN43qaqYkliscdO8uaXht
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 207KB

file.exe

IMPHASH 2978ab39f4c8ebdb6fac37e4d6c2c4bd
SHA256 fe419ee8af5fe3dbb505675ee6078748525170ab8fbbb8a53fb8095773b4b161
MD5 e76e0ae2b1b1458e9a69e0c4a735a454
SHA1 f0f586456e195ef8e81a5e9c9ebcbb09a3430475
SHA512 47b6e8c4a67d6cb291adb40a5e60b17aab1065fe9f7d77d8531c43ccdf9f03608bd947e2d25b62165ffee303fc0931d9ed6523087ecb73ea26d8512e855790be
SSDEEP 3072:FXNxpYINwCccGoEqI5TqYkwmHismZz5Oq9+tauaXhOj+:B3+IN43qaqYkliscdO8uaXht
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29280

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetBinaryTypeW IsBadStringPtrA GetLastError TlsGetValue VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType AddAtomW FoldStringW FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData SetFileAttributesW LCMapStringW GetProcAddress CreateMutexW GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing