file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample221014-q89e2adfbm
SHA256 6fd724e75ef9efd36ebdec644178235993880fa68ea1a9f44cee17b5c37f0aba
MD5 74bcf849a77beaa61caf54cd337cf94f
SHA1 d42cad56d8db509002f233c09255257fdddfce5a
SHA512 77068780bd91e609006d226aae15f59251edb73f9b5ed38cf94ee25bc446c365aa8d25f2052d3a97dd4aa1ccf46d448278109635cd713111ede00c3b21c78abf
SSDEEP 3072:qXN97IJwE4Ig8u9CBs57a+50PVmno7yzD/rqcCRTRLo0KIIcuAY1Zdr:K8JwEYwBuV50PWoHRG0IBD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH 3cd1a8c13147dc1e9a52915686dcc93d
SHA256 6fd724e75ef9efd36ebdec644178235993880fa68ea1a9f44cee17b5c37f0aba
MD5 74bcf849a77beaa61caf54cd337cf94f
SHA1 d42cad56d8db509002f233c09255257fdddfce5a
SHA512 77068780bd91e609006d226aae15f59251edb73f9b5ed38cf94ee25bc446c365aa8d25f2052d3a97dd4aa1ccf46d448278109635cd713111ede00c3b21c78abf
SSDEEP 3072:qXN97IJwE4Ig8u9CBs57a+50PVmno7yzD/rqcCRTRLo0KIIcuAY1Zdr:K8JwEYwBuV50PWoHRG0IBD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue SetEndOfFile InterlockedIncrement GetConsoleAliasA SetComputerNameW MoveFileWithProgressA IsBadReadPtr ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA SetVolumeMountPointA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetGeoInfoA GetBinaryTypeW IsBadStringPtrA CreateMutexW GetLastError GetProcAddress VirtualAlloc HeapSize GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData LCMapStringA GetSystemDefaultLangID GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing