file[.]exe | Triage™

General

Target
file.exe
Size 232KB
Sample221014-n7fefsdddq
SHA256 f4354cde7b0ddad039b3e8a8a3f30d1b5e0ef4704771441384e6bf34df23d4aa
MD5 5b7422b57ff9e5539e46bb8897d793f3
SHA1 811a80be752b4decbec365541a4d1347bc22c29b
SHA512 d5790d6ab9ecae163f0085f9a676f1ed55c3743a29beca32043e87da98f20ba25fe2483980a3e9435d759f50a9bbdec14c2db8c1d71bd835ce65eac4e50af7ff
SSDEEP 3072:GXNgIrxiaaWktv18Uc1L+ybA5rHXqeBd7il9Vmi6/97/h0KBEEw8Uv:u+8xip/tv2nCybCHXqeBomi6/910yha
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 232KB

file.exe

IMPHASH 5010870508222987049c95041bd87cda
SHA256 f4354cde7b0ddad039b3e8a8a3f30d1b5e0ef4704771441384e6bf34df23d4aa
MD5 5b7422b57ff9e5539e46bb8897d793f3
SHA1 811a80be752b4decbec365541a4d1347bc22c29b
SHA512 d5790d6ab9ecae163f0085f9a676f1ed55c3743a29beca32043e87da98f20ba25fe2483980a3e9435d759f50a9bbdec14c2db8c1d71bd835ce65eac4e50af7ff
SSDEEP 3072:GXNgIrxiaaWktv18Uc1L+ybA5rHXqeBd7il9Vmi6/97/h0KBEEw8Uv:u+8xip/tv2nCybCHXqeBomi6/910yha
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29328

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue SetEndOfFile InterlockedIncrement GetConsoleAliasA IsBadReadPtr ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA SetVolumeMountPointA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetGeoInfoA GetBinaryTypeW IsBadStringPtrA GetLastError CreateMutexW VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType AddAtomW FoldStringW FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData SetFileAttributesW LCMapStringW GetProcAddress GetSystemDefaultLangID GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing