file[.]exe | Triage™

General

Target
file.exe
Size 306KB
Sample220910-slqqhsacd6
SHA256 e4441e69c1f3edf10db4e52ee54d7851e6f12e551a7e1c316936fc684149a919
MD5 ccdc60db92e20c9860d6df1d3eb125e8
SHA1 b5ffcaf5d04ebffcde995219f17334c6ecdc6478
SHA512 3a740df3511845d78851f94fd33fc4420a27b1096266e3b739b3fca1fc2f0378e81efa94e6abd09f2331cee70898c6868d46027fa78c574655e22889cc167dd6
SSDEEP 6144:E+ZtJMqCpPCuzzjaNamaSkDy0baRf1fK5v4NWvF/jJezeNUs:EkJMqduXGNBHkDy0YfZK5QYvxFezeN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 306KB

file.exe

IMPHASH e5eb0b6afc8cf9fc2d751b04e25286aa
SHA256 e4441e69c1f3edf10db4e52ee54d7851e6f12e551a7e1c316936fc684149a919
MD5 ccdc60db92e20c9860d6df1d3eb125e8
SHA1 b5ffcaf5d04ebffcde995219f17334c6ecdc6478
SHA512 3a740df3511845d78851f94fd33fc4420a27b1096266e3b739b3fca1fc2f0378e81efa94e6abd09f2331cee70898c6868d46027fa78c574655e22889cc167dd6
SSDEEP 6144:E+ZtJMqCpPCuzzjaNamaSkDy0baRf1fK5v4NWvF/jJezeNUs:EkJMqduXGNBHkDy0YfZK5QYvxFezeN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

65600

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddAtomA GetProfileSectionW VerifyVersionInfoW LocalFree SetProcessPriorityBoost VirtualProtect GlobalGetAtomNameA GetComputerNameExW FindResourceW GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GetTapeParameters _lread UnlockFile GetPrivateProfileStructW GetDiskFreeSpaceExW DefineDosDeviceA SetVolumeMountPointA GetAtomNameA SetConsoleScreenBufferSize TerminateThread EnumResourceLanguagesW GetCPInfoExW GetThreadContext lstrlenW GetProcessAffinityMask GenerateConsoleCtrlEvent IsProcessInJob CopyFileA lstrcpynA WriteConsoleA MoveFileWithProgressW GetBinaryTypeA GetLastError SearchPathA GetCommandLineA InterlockedIncrement GetCalendarInfoW GetConsoleTitleW CopyFileW CreateActCtxW FindResourceA FormatMessageW MoveFileWithProgressA InitializeCriticalSection GetConsoleFontSize FindNextVolumeW GetCurrentConsoleFont GetConsoleAliasA AddAtomW InterlockedDecrement LoadLibraryA LoadLibraryW ExitThread HeapReAlloc LeaveCriticalSection GetComputerNameW EnumSystemLocalesW GetVersion OpenMutexA FileTimeToLocalFileTime SearchPathW GetProcessShutdownParameters FormatMessageA VerifyVersionInfoA InterlockedCompareExchange EnumDateFormatsA FoldStringA GlobalAlloc GetFileType GetNumberOfConsoleInputEvents GetDefaultCommConfigW SetLastError lstrcpyW GetMailslotInfo GetThreadLocale lstrcpyA GetFileAttributesA GetSystemWindowsDirectoryW ReadConsoleInputA EnumTimeFormatsA GetPrivateProfileStructA _hread GetQueuedCompletionStatus lstrcatA GetFullPathNameW DebugSetProcessKillOnExit SetCurrentDirectoryW SetCalendarInfoW ReadConsoleOutputCharacterA FindNextFileW CopyFileExW CreateJobObjectA FindNextChangeNotification Sleep DeleteCriticalSection EnterCriticalSection RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind MoveFileA GetStartupInfoA HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW OutputDebugStringW ExitProcess SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer SetStdHandle GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CloseHandle CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

SelectObject GetBoundsRect

advapi32

AbortSystemShutdownW

Sharing