file[.]exe | Triage™

General

Target
file.exe
Size 260KB
Sample221029-e3nqlabbh6
SHA256 49bb64bffbc1988c54e47833eeec3897d985f48c4a7689090fd3f1a7c2f1b4f1
MD5 9ef4dcf72c95ea77cf0c1255f8e18e4a
SHA1 c9b325333d4f7a8c2aa18a93b27887c17e05cdfc
SHA512 f30ac7a89f1c1bca99f2f4d2443f0625cd59c83661192d51aa31b789893f1ee5565a10eb643b48dcb1280d4e6dd9e607182a81cf95e74500283bee47ec28dda7
SSDEEP 3072:rZRyZB2mqZLqoVf2z59VKhvH7yR6kETZllrIDKbN7xP4KEM/h3:/yZB1qZLTVcVKheG1N17E
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 260KB

file.exe

IMPHASH 0094705b2c9b847219b2817888057ed6
SHA256 49bb64bffbc1988c54e47833eeec3897d985f48c4a7689090fd3f1a7c2f1b4f1
MD5 9ef4dcf72c95ea77cf0c1255f8e18e4a
SHA1 c9b325333d4f7a8c2aa18a93b27887c17e05cdfc
SHA512 f30ac7a89f1c1bca99f2f4d2443f0625cd59c83661192d51aa31b789893f1ee5565a10eb643b48dcb1280d4e6dd9e607182a81cf95e74500283bee47ec28dda7
SSDEEP 3072:rZRyZB2mqZLqoVf2z59VKhvH7yR6kETZllrIDKbN7xP4KEM/h3:/yZB1qZLTVcVKheG1N17E
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19675

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile GetConsoleAliasA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW Sleep AssignProcessToJobObject HeapDestroy GetFileAttributesA CreateMutexW WriteConsoleW lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW ReadConsoleInputW GetConsoleAliasW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing