file[.]exe | Triage™

General

Target
file.exe
Size 295KB
Sample220928-qsynlahbbk
SHA256 71ad8e2f6ff0c8f2b7e7f5023525f3e4a89718a2795c2e6a0638996027f4e6fa
MD5 1b321e1087287c70396dc8d5e572092d
SHA1 52b51bd15302bd44b63e939447c55178b8f536dc
SHA512 1936f48ec0c6d1bcffcfb9b979bdb351cb9969e23db5c5eada18ff8b6ff9a6d81cd4d746a6036c0e1bb8b30e849e3fe8e6a00d7abc70fbfe1ff02fd6f82dd8ad
SSDEEP 6144:VL6h+mF7j4en3jijldRtQ30ZICXGQbigavwVfIJ:V9mh4e3j6lvJZf+RJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 295KB

file.exe

IMPHASH 93226edf73e88569fc77ee00d1ab94d1
SHA256 71ad8e2f6ff0c8f2b7e7f5023525f3e4a89718a2795c2e6a0638996027f4e6fa
MD5 1b321e1087287c70396dc8d5e572092d
SHA1 52b51bd15302bd44b63e939447c55178b8f536dc
SHA512 1936f48ec0c6d1bcffcfb9b979bdb351cb9969e23db5c5eada18ff8b6ff9a6d81cd4d746a6036c0e1bb8b30e849e3fe8e6a00d7abc70fbfe1ff02fd6f82dd8ad
SSDEEP 6144:VL6h+mF7j4en3jijldRtQ30ZICXGQbigavwVfIJ:V9mh4e3j6lvJZf+RJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30569

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameW IsBadCodePtr LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringA PeekConsoleInputA GlobalGetAtomNameA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameA lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FoldStringW OpenWaitableTimerA ResetEvent GlobalWire GetComputerNameW GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW GetVolumePathNameW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing