file[.]exe | Triage™

General

Target
file.exe
Size 261KB
Sample220906-tqsaksdaan
SHA256 c373e754e77f74df9744f0e11b661cff57e509b4d63ffe1aaa2261ad5547eade
MD5 ba4bce11e71424199bbb5057544c3461
SHA1 d141a008e5c045f37f9022da4c980f59bf347eff
SHA512 307162252b181b33aa0835d89323be3aa87cad750f6d0d9d534d8238577c6f80571bf92cf94ceb10aba6a1afe020beba8caabc57a58d8485d38a36ff6a6443ec
SSDEEP 6144:2gwDrAmDXbM+lbbjOKSMcY4jyp2OoZJNjXsN9f/FqRIJ:2ggAm7gabbjOKSMchyIOohWRFqy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 261KB

file.exe

IMPHASH 996ab292099399c5d3a6ea501195e9cf
SHA256 c373e754e77f74df9744f0e11b661cff57e509b4d63ffe1aaa2261ad5547eade
MD5 ba4bce11e71424199bbb5057544c3461
SHA1 d141a008e5c045f37f9022da4c980f59bf347eff
SHA512 307162252b181b33aa0835d89323be3aa87cad750f6d0d9d534d8238577c6f80571bf92cf94ceb10aba6a1afe020beba8caabc57a58d8485d38a36ff6a6443ec
SSDEEP 6144:2gwDrAmDXbM+lbbjOKSMcY4jyp2OoZJNjXsN9f/FqRIJ:2ggAm7gabbjOKSMchyIOohWRFqy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

39440

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteAtom GetProfileSectionW VerifyVersionInfoW LocalFree GetProcessPriorityBoost VirtualQuery GlobalGetAtomNameA GetComputerNameExA FindResourceW GetComputerNameExW GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress VirtualProtect _lwrite UnlockFile GetPrivateProfileStructA GetDiskFreeSpaceExA DefineDosDeviceW SetVolumeMountPointW GetAtomNameW SetConsoleScreenBufferSize EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW SetProcessAffinityMask SetConsoleCtrlHandler IsProcessInJob CopyFileA lstrcpynA WriteConsoleW GetLastError GetCommandLineW FormatMessageW GetModuleHandleW CreateJobObjectW InitializeCriticalSection FindNextVolumeA GetConsoleCursorInfo GetConsoleAliasW MoveFileWithProgressW AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionA GetDefaultCommConfigA SetLastError TerminateThread HeapFree LeaveCriticalSection GetComputerNameA EnumSystemLocalesW GetVersion OpenMutexW LocalFileTimeToFileTime SearchPathW GetProcessShutdownParameters CreateMutexA FormatMessageA EnumDateFormatsW InterlockedExchangeAdd FoldStringW GlobalAlloc GetFileInformationByHandle GetNumberOfConsoleInputEvents GetFileAttributesA GetSystemWindowsDirectoryA ReadConsoleInputA EnumDateFormatsA GetPrivateProfileStructW _hread GetConsoleAliasA CreateIoCompletionPort lstrcatW GetFullPathNameA DebugBreakProcess SetCurrentDirectoryA SetCalendarInfoA lstrcpyA FindNextFileW ReadConsoleOutputCharacterA CopyFileExA WriteProfileSectionW MoveFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

GetCharWidthA GetBoundsRect SelectObject

Sharing