file[.]exe | Triage™

General

Target
file.exe
Size 224KB
Sample221024-qext5sghdk
SHA256 1efa3aa73429875dcebf39a4ec19b311057276a965240f00594af85856398f8e
MD5 780713ef28a2204b0be06d2129e608f0
SHA1 717a9fcb7439e319c78b3054ecf6b96bd46f6798
SHA512 e53cc907a47e7a84b6bffebac4ed7f715501630e4dccf889857dc2dc494fc5dacd9b935d8ae47663379ed12f3226db88b3f76538be86d9da50d58797946dd48f
SSDEEP 3072:Z3en6dRps3D6lTNELD0OqR7E69WZ59odABbKDpYEu4GFlnv6nljQnYOC:peCCLDOlE4WR5KNMvAlj
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH 3517a3c748c8bb1487de3354b9418a05
SHA256 1efa3aa73429875dcebf39a4ec19b311057276a965240f00594af85856398f8e
MD5 780713ef28a2204b0be06d2129e608f0
SHA1 717a9fcb7439e319c78b3054ecf6b96bd46f6798
SHA512 e53cc907a47e7a84b6bffebac4ed7f715501630e4dccf889857dc2dc494fc5dacd9b935d8ae47663379ed12f3226db88b3f76538be86d9da50d58797946dd48f
SSDEEP 3072:Z3en6dRps3D6lTNELD0OqR7E69WZ59odABbKDpYEu4GFlnv6nljQnYOC:peCCLDOlE4WR5KNMvAlj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleA GetVolumeInformationW GetComputerNameA VerLanguageNameA LocalSize InterlockedDecrement GetSystemTimeAdjustment FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleW lstrlenW FindResourceW GetComputerNameExA GetProcAddress LocalAlloc FoldStringW GetFileTime GetConsoleAliasesLengthW GetVolumePathNameA GetPrivateProfileStructW GetOEMCP SetProcessAffinityMask GlobalFindAtomA WriteConsoleW InterlockedIncrement CreateActCtxA GetModuleHandleA InitializeCriticalSection CancelDeviceWakeupRequest GetConsoleSelectionInfo EnterCriticalSection GetPrivateProfileStructA InterlockedCompareExchange EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI GetTickCount SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

Sharing