file[.]exe | Triage™

General

Target
file.exe
Size 295KB
Sample221012-qtkhcsdfdk
SHA256 e8d005636bf7790746cea1434fff0574d5510fcb70bac45f4cc6d067fd2b76bc
MD5 2ab3c48a69d2396ce8def2f8e4b62263
SHA1 6e1539c60352cf0c324ef83f8232f82205cee568
SHA512 2b5c1df70bd5240341bf2bd6d448ff26783fb8bfff521682ba2012a9b516b0dd058980d8ddad2b75bfc090961c0aff4ba8254c279153078609bfacdcd1b9dbe8
SSDEEP 6144:S5auDn+gLL7LGQ81w+Je7GNEB2BivKmseigavwVfL:S3D+Y7Lsw+U7GiKT8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 295KB

file.exe

IMPHASH e7335d11c67dfcbac096cafa51d4b057
SHA256 e8d005636bf7790746cea1434fff0574d5510fcb70bac45f4cc6d067fd2b76bc
MD5 2ab3c48a69d2396ce8def2f8e4b62263
SHA1 6e1539c60352cf0c324ef83f8232f82205cee568
SHA512 2b5c1df70bd5240341bf2bd6d448ff26783fb8bfff521682ba2012a9b516b0dd058980d8ddad2b75bfc090961c0aff4ba8254c279153078609bfacdcd1b9dbe8
SSDEEP 6144:S5auDn+gLL7LGQ81w+Je7GNEB2BivKmseigavwVfL:S3D+Y7Lsw+U7GiKT8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30384

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing