file[.]exe | Triage™

General

Target
file.exe
Size 232KB
Sample221014-pp216sdean
SHA256 4cafb9e7b402f3dd4dd9658f1f1dc558e05f2d58ef0bf806cb60715deed5ee98
MD5 1978df56cd88512e28c07662366c0ac4
SHA1 257fcb52593a0db1d080d7e0988ceab5e1337b4f
SHA512 c76c5078011b69bbf616b9d5b5afaa8e62ee6ed92b6a86f57143b241b43e387f1cf5d4be35378ea9c094842e6a27b193cf77bffe0f1b2b1f49cafaa1df4b60d0
SSDEEP 3072:CXNDl+Cch58HITDs575mRyYUsVv+IwT7PET/xvG0KoxfJ8:CKCcG8Du5dVsVv+xETZe0zxfJ8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 232KB

file.exe

IMPHASH 3cd1a8c13147dc1e9a52915686dcc93d
SHA256 4cafb9e7b402f3dd4dd9658f1f1dc558e05f2d58ef0bf806cb60715deed5ee98
MD5 1978df56cd88512e28c07662366c0ac4
SHA1 257fcb52593a0db1d080d7e0988ceab5e1337b4f
SHA512 c76c5078011b69bbf616b9d5b5afaa8e62ee6ed92b6a86f57143b241b43e387f1cf5d4be35378ea9c094842e6a27b193cf77bffe0f1b2b1f49cafaa1df4b60d0
SSDEEP 3072:CXNDl+Cch58HITDs575mRyYUsVv+IwT7PET/xvG0KoxfJ8:CKCcG8Du5dVsVv+xETZe0zxfJ8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue SetEndOfFile InterlockedIncrement GetConsoleAliasA SetComputerNameW MoveFileWithProgressA IsBadReadPtr ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA SetVolumeMountPointA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetGeoInfoA GetBinaryTypeW IsBadStringPtrA CreateMutexW GetLastError GetProcAddress VirtualAlloc HeapSize GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData LCMapStringA GetSystemDefaultLangID GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing