file[.]exe | Triage™

General

Target
file.exe
Size 225KB
Sample221013-slqeraagfr
SHA256 2da46de72e7e8b797bebf1d5541d3e76106bdb5fa4668e96321d2061f7cf55a9
MD5 74dc607abb5775ce8235ee25598e0cfc
SHA1 784687d19f7e5ef36d3922294212af87dcf31754
SHA512 f398ee5be826bb1aa237e0b234ffec9aa8f8745b65bbfe551c285e1b5f18f08f3bcb82878cb3c4bf3988f45b926033482235772202f972f3597da82c5aa80f16
SSDEEP 6144:2dA6LFnUqLkQnAE7S5yklpQsHDpRpl2ZM:2TLF53nAE+5yklpdHDLt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 225KB

file.exe

IMPHASH fd35832937d651249671064807c2696d
SHA256 2da46de72e7e8b797bebf1d5541d3e76106bdb5fa4668e96321d2061f7cf55a9
MD5 74dc607abb5775ce8235ee25598e0cfc
SHA1 784687d19f7e5ef36d3922294212af87dcf31754
SHA512 f398ee5be826bb1aa237e0b234ffec9aa8f8745b65bbfe551c285e1b5f18f08f3bcb82878cb3c4bf3988f45b926033482235772202f972f3597da82c5aa80f16
SSDEEP 6144:2dA6LFnUqLkQnAE7S5yklpQsHDpRpl2ZM:2TLF53nAE+5yklpdHDLt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41606

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW VerLanguageNameW LocalFlags InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleA GetCommandLineW GetProfileSectionA WriteConsoleOutputA ReadConsoleA GetCommandLineA FindFirstChangeNotificationA VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA CreateActCtxW FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA FindResourceA RtlCaptureContext InterlockedCompareExchange LeaveCriticalSection GetPrivateProfileStructA DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError SearchPathA LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

CharUpperBuffA

advapi32

SetThreadToken

Sharing