file[.]exe | Triage™

General

Target
file.exe
Size 322KB
Sample221102-e3nqlaaaej
SHA256 de219eb4ea8aa0886fc938555a58a49644c95f55c1c2d733f7cf41eea3f8d7e6
MD5 026d736d765edae4e227ffb243a8bf38
SHA1 0be6b2386895082b8de31db31e15054891826268
SHA512 294b7b0be51b60142f25afe137d0c193f7ad8412dcfa620aa2746fac2e78d189a65df1f43d47c830fe97374e6539d11a7dee7e7b0174255dcf32e9ff461dc6d4
SSDEEP 3072:pFi82E8ou2rhc5homnMxGBu0bqkhJVxWxjsbq8EKgDgrVggjcGkNIVqI8:a82R294o/Gotwzbb7gO7ITsqF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 0ebd17a13b40f108ded2cb86c03ee706
SHA256 de219eb4ea8aa0886fc938555a58a49644c95f55c1c2d733f7cf41eea3f8d7e6
MD5 026d736d765edae4e227ffb243a8bf38
SHA1 0be6b2386895082b8de31db31e15054891826268
SHA512 294b7b0be51b60142f25afe137d0c193f7ad8412dcfa620aa2746fac2e78d189a65df1f43d47c830fe97374e6539d11a7dee7e7b0174255dcf32e9ff461dc6d4
SSDEEP 3072:pFi82E8ou2rhc5homnMxGBu0bqkhJVxWxjsbq8EKgDgrVggjcGkNIVqI8:a82R294o/Gotwzbb7gO7ITsqF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17345

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW ReadFile GetVolumePathNameA SetThreadContext GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW ReadConsoleInputW LCMapStringW LCMapStringA GetSystemDefaultLangID HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing